wizcodepl/outdated-packages-health-check
It includes a clear README, changelog, repository tests, an MIT license, and organization backing. Its short history provides limited evidence of durable maintenance, so pinning this release deserves care.
57%
Total Score
75
93
50
Health Score Breakdown
The package is only about 4.5 months old and has six releases, with a median release interval of 0 days. That shows early activity but limited evidence of an established maintenance pattern.
The repository recorded 0 commits and 0 active maintainers in the last three months. For a package this new, that is a meaningful maintenance concern despite the recent release history.
No security policy is present in the repository. This is a transparency gap, though the repository's small size and Dependabot coverage partly reduce its significance.
All 12 analyzed action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-condition finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no reported untrusted checkout or script-injection sink, so these are hygiene and supply-chain cautions rather than a severe standalone risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jakub Szcześniak |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^10.0||^11.0||^12.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.