Package Health/bnussbau/laravel-trmnl-blade

bnussbau/laravel-trmnl-blade

Version 3.3.1 appears healthy and reasonable to depend on: it is a stable, non-deprecated release with 22 releases over 455 days, 17 releases in the last 12 months, a recent repository push, documented licensing, repository tests and changelog coverage, and modest dependency complexity. The main risks are operational rather than abandonment-level: all recent commits come from one contributor, the package has very limited popularity, and several workflows grant write permissions or use pull_request_target. The package is therefore suitable for adoption with normal dependency and CI review, but it has less maintainer redundancy and repository security hardening than a mature, widely backed project.

Latest 3.3.1

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

Five workflows were analyzed; one uses pull_request_target, which can be a sensitive workflow context. No untrusted checkout or script-injection patterns were detected, reducing but not eliminating the workflow risk.

Lifecycle scripts

The package uses a post-autoload-dump lifecycle script. This is an install-time execution surface that warrants review, although the signal does not show multiple or obviously excessive lifecycle hooks.

Maintainers

Only one account has registry publish access. This is a limited publishing redundancy signal, and the repository evidence also shows a single active contributor, so release continuity depends heavily on one person.

Project backing

The repository owner is the individual user bnussbau, not an organization. This does not indicate poor health by itself, but it means the single-maintainer and bus-factor concerns are not visibly mitigated by organizational backing.

Repo bus factor

One contributor made all 6 commits in the last 3 months, with a 100% commit share. Because the owner is an individual user rather than an organization, there is no provided project-backing evidence to compensate for this concentration.