Package Health/arthurnassar/laravel-stripe-connect

arthurnassar/laravel-stripe-connect

The MIT license, matching repository, and lack of install-time scripts provide useful baseline transparency. However, the project appears dormant and has limited testing and security safeguards, making long-term maintenance a liability.

Latest v0.4.6

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has made no releases in the last 12 months, with its latest release on August 1, 2024 despite being about 860 days old. This is strong evidence of dormancy for a package still at version 0.4.6.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the unchanged release history. This materially raises abandonment risk.

Package scaffolding

The release includes a readable 2,070-character README and has a GitHub release for this version. The absence of tests and a changelog in the published artifact is normal packaging practice, but the repository also reports no tests.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. That weakens assurance for a payment-related integration, although it does not by itself indicate unsafe code.

Security policy

The linked repository has no security policy, leaving vulnerability-reporting expectations and response ownership unclear. This is a meaningful transparency gap for a package handling Stripe integrations.