baraveli/rss-scraper

Usable with caveats: the package is documented, tested, licensed, and not deprecated, but it has had no release or repository activity for nearly six years. Depend on it only if its older Laravel support and unchanging behavior fit your project.

Latest v1.3

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers during the last three months, consistent with the long release pause. This is the main abandonment risk for taking a dependency on the package.

Release history

The latest release was published nearly six years ago, with no releases in the last 12 months. Earlier releases were frequent, but the long pause materially raises maintenance and compatibility concerns.

Repo popularity

The repository has 7 stars and 3 forks, indicating limited external adoption. This is supporting evidence rather than a decisive concern for a small, focused package.

Repo tooling

Composer is used for the build, but no security scanning tooling is present. The missing scanning is a transparency gap, though the repository has no analyzed workflows that add additional risk.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This matters more because the package retrieves remote RSS content, although it is not evidence of maliciousness.