andydefer/laravel-images

This release appears usable but is still a young, rapidly changing package rather than a mature dependency. It has a clear MIT license, substantial documentation, repository-backed tests, active recent commit activity, no deprecation or archive status, and no install-time lifecycle scripts. However, the project is only 39 days old, has published 146 releases with a very short median interval, all recent commits come from one contributor, and the repository has no security policy or workflow automation; these factors increase maintenance, release-discipline, and continuity risk. Adopt it with review of version compatibility and a contingency plan if the package is important to your application.

Latest v0.20.8

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health checks

Maintainers

Only one registry account has publish access. This is a continuity concern for a user-owned project, and the repository activity also shows no broader active contributor base to compensate for it.

Project backing

The repository is owned by an individual user rather than an organization, so there is no organizational backing shown to mitigate the project's single-maintainer concentration.

Release history

The package is only 39 days old but has 146 releases, including 143 in the last 12 months, with a median release interval of about 29 minutes. This demonstrates active publishing but also unusually rapid release cadence for a package still establishing maturity.

Repo bus factor

One contributor made all 137 commits in the last three months, giving the project a complete single-contributor bus factor with no demonstrated handoff capacity.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers external validation but is not by itself evidence that the package is unsafe to depend on.