Package Health/alisaleem/laravel-settings

alisaleem/laravel-settings

The MIT license, focused file set, repository tests, and matching source give consumers useful transparency. The small dependency set and stable version reduce integration uncertainty, though ongoing support should not be expected.

Latest v1.2.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in the last 12 months, and its latest release was on July 1, 2024 despite being about 2 years and 6 months old at collection time. This is meaningful evidence of stalled maintenance.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, corroborating the absence of recent registry releases and raising support risk.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher, providing little evidence of community adoption or a broader support base. Popularity is supporting evidence, so this lowers confidence in long-term resilience rather than deciding the verdict alone.

Security policy

The linked repository has no security policy. That leaves vulnerability-reporting and response expectations undocumented, which is a transparency gap for a package intended to be used in applications.

Workflow audit

Both workflows were analyzed successfully with no reported audit findings or untrusted checkouts, but all 5 action references are unpinned and one workflow grants top-level write permissions. The permissions are not paired with an identified untrusted sink, so this is a hygiene concern rather than a severe risk.