artisan-toolbox/core

This release is usable and shows good transparency and repository hygiene: it is MIT-licensed, non-deprecated, backed by a matching organization-owned repository, includes a README and changelog, has repository tests, security policy, Dependabot, and read-only workflow permissions. However, it is very young at 17 days with only two releases, and all 10 recent commits come from one contributor, leaving limited evidence of long-term maintenance and a notable bus-factor concern. The package artifact also runs a post-autoload-dump lifecycle script, which warrants review, although the available workflow and security signals are reassuring.

Latest 1.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package has three runtime dependencies, including PHP, illuminate/support, and inertiajs/inertia-laravel; this is a meaningful integration surface but not an unusually large runtime dependency set.

Lifecycle scripts

A post-autoload-dump install-time script is present, adding execution complexity during dependency installation; the signal does not show that it is unsafe, so this is a review item rather than a severe risk.

Release history

The package is only 17 days old and has two releases separated by about 17 days, providing very limited evidence of sustained maintenance or release discipline.

Repo bus factor

One contributor made all 10 recent commits, producing a 100% top-contributor share and a clear continuity risk; organization ownership partly mitigates handoff concerns but does not remove them.

Repo popularity

The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity is not decisive for a small, newly released package.