Package Health

alexwijn/laravel-changelogs

The package includes tests, a changelog, and an MIT declaration, but its source has seen no commits for over seven years. It also lacks a README and security policy, leaving maintenance and consumer guidance weak.

Latest 0.4.1PackagistPackagist

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Package file treecaution

The package and repository each contain only six tracked entries, including source, a command, and a placeholder test directory. This is consistent with a small package but provides little evidence of broader maintenance or documentation.

Package scaffoldingcaution

The artifact contains tests and a changelog, and the repository also has both, which supports basic project discipline. The missing README is a minor consumer-facing gap for a Laravel library.

Release historycaution

The latest release was over seven years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, although the package is not marked deprecated.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, while the repository was last pushed in July 2019. That prolonged inactivity materially raises abandonment risk.

Repo popularitycaution

The repository has zero stars, forks, and watchers, offering no supporting evidence of community adoption or external scrutiny. Popularity is only supporting evidence, so this weighs modestly rather than deciding the verdict.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alex Wijnholds

Direct Dependencies

DependencyLast ReleaseScore
illuminate/support
Version ~4.1 || ~5.0
—
—
cpliakas/git-wrapper
Version ~2.2
—
—

Weekly Downloads

Info

Last Published
7 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform