Package Health

woweb/laravel-openproduct

Usable with caveats: it is a properly licensed, tested, clearly documented Laravel package backed by an organization, but it has had only one release and no recorded commits in the last three months. The missing security policy and unspecified workflow permissions add modest transparency concerns.

Latest v1.0.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

This is the sole release, published about 177 days ago, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months; combined with only one release, this is a meaningful sign of limited ongoing activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in automated security hygiene.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.

Token permissionscaution

The only workflow has no top-level token permissions declaration. No write permissions were detected, but explicit least-privilege settings would provide clearer CI safety.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Michel Verhoeven

Direct Dependencies

DependencyLast ReleaseScore
illuminate/http
Version ^10.0|^11.0|^12.0
—
—
guzzlehttp/guzzle
Version ^7.2
—
—
illuminate/support
Version ^10.0|^11.0|^12.0
—
—
orchestra/testbench
Version ^10.0
—
—
illuminate/validation
Version ^10.0|^11.0|^12.0
—
—

Weekly Downloads

Info

Last Published
6 months ago
Created
6 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform