achyutn/laravel-helpers

The package includes tests, a clear README, a matching repository, and release notes for this version. Recent repository commits are absent, and all six workflow actions are unpinned; the missing security policy adds a smaller transparency gap.

Latest v0.11.1

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual account rather than an organization, so the project appears to rely on an individual maintainer rather than formal organizational backing.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The same-day release partly offsets this because publication activity is recent, but the short-term development lull remains a maintenance concern.

Security policy

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, but it is not evidence that the package is unsafe.

Version stability

Version 0.11.1 is not a prerelease, but the package remains below a stable 1.0 major version, so API stability may be less established.

Workflow audit

All three workflows were analyzed with no audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all six action references are unpinned, leaving workflow dependencies exposed to upstream changes.