worksome/data-export

This release appears to be a healthy dependency: it has a stable v4.0.0 release, a five-year history with 37 releases and five releases in the last 12 months, recent repository activity, three active contributors, organization backing, repository/package alignment, and repository tests and automation. The MIT manifest declaration and absence of install lifecycle scripts are also positive. The main cautions are missing security-policy documentation, incomplete explicit workflow token permissions, and a pull-request-target workflow with write access; these increase maintenance and CI governance risk but do not outweigh the evidence of active development and established project structure.

Latest v4.0.0Packagist

Health Score Breakdown

Dangerous workflowscaution

One of three workflows uses pull_request_target, which can carry elevated CI risk, but no untrusted checkouts or script-injection patterns were detected.

Repo popularitycaution

The repository has only 1 star and 1 fork, indicating limited external adoption evidence; popularity is supporting evidence rather than a health verdict, and active commits and releases compensate for this weakness.

Security policycaution

No repository security policy was found, reducing transparency for vulnerability reporting and response expectations.

Token permissionscaution

Two workflows lack top-level permissions declarations, and one workflow declares write access. Explicit least-privilege permissions would improve CI governance and reduce accidental token exposure.

View all 19 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
nesbot/carbon Version ^3.0	—	—
nuwave/lighthouse Version ^6.54	—	—
illuminate/support Version ^12.0 || ^13.0	—	—
illuminate/database Version ^12.0 || ^13.0	—	—
illuminate/container Version ^12.0 || ^13.0	—	—

View All 8 Dependencies