yard/data
The package is well documented, tested, and backed by recent work from several contributors. Low adoption and the absent security policy provide less independent reassurance, while the workflows need tightening.
82%
Total Score
100
94
67
Health Score Breakdown
The repository has zero stars and forks and only two watchers, indicating limited adoption; this is supporting evidence rather than a maintenance verdict, and active commits compensate for it.
The repository has no security policy file, reducing transparency about vulnerability reporting and response.
All six analyzed action references are unpinned, and the audit found high-confidence secrets-inherit findings in every workflow; one workflow also grants top-level write access. No untrusted checkout or script injection was found, so this is workflow hygiene risk rather than a severe adoption blocker.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jgrossi/corcel Version ^9.0 | — | — |
spatie/laravel-data Version ^4.5 | — | — |
Weekly Downloads
Info
- Last Published
- 10 days ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.