znck/belongs-to-through
The source repository remains maintained enough to provide tests, release notes, and a matching project, but registry publication has stopped. Pinning the replacement package is preferable because this package is marked abandoned and its latest registry release is several years old.
58%
Total Score
50
75
50
Health Score Breakdown
Packagist marks the package abandoned and names staudenmeir/belongs-to-through as its replacement, which is a meaningful adoption concern even though the replacement appears closely related.
The package has 26 releases over more than 11 years, but there have been no registry releases in the last 12 months and the latest release was in August 2021.
No commits or active maintainers were recorded in the last 3 months, which weakens evidence of ongoing maintenance despite the repository's recent push timestamp.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Both workflows were fully analyzed with no dangerous audit findings or untrusted checkouts, but all 5 action references are unpinned, leaving avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rahul Kadyan |
| Jonas Staudenmeir |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/database Version ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.