alhaji-aki/laravel-sms

Maintenance capacity looks thin, with no commits in the last three months and little repository adoption. The package otherwise has clear documentation, repository tests, a license, and a recent release; pin this version if limited activity is acceptable.

Latest 0.3.1

Packagist

65%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with only two releases in the last year, this indicates a thin and recently quiet maintenance base.

Repo popularity

The repository has two stars, no forks, and one watcher. Popularity is not decisive, but these very low adoption signals provide little evidence of broad community support.

Security policy

The repository has no security policy. This is a transparency gap for a package handling application integrations, although its documented license, tests, and dependency tooling provide some compensating project structure.

Workflow audit

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Abdul Kudus

Direct Dependencies

Dependency	Last Release	Score
illuminate/support Version ^10.0\|^11.0\|^12.0\|^13.0	—	—
illuminate/contracts Version ^10.0\|^11.0\|^12.0\|^13.0	—	—
thecodingmachine/safe Version ^2.5\|^3.0	—	—
illuminate/notifications Version ^10.0\|^11.0\|^12.0\|^13.0	—	—
propaganistas/laravel-phone Version ^5.3\|^6.0	—	—