Package Health/byteflick/laravel-strict-domain

byteflick/laravel-strict-domain

The repository has useful tests, a changelog, a security policy, and dependency scanning. Its small popularity and inactive recent commit and release activity reduce confidence in ongoing maintenance, while workflow checks need attention before relying on automated publishing.

Latest v3.0.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is about 2.5 years old but has only five releases, with no releases in the last 12 months and the latest release in March 2024. That is a meaningful maintenance concern for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates that maintenance may have stalled.

Repo issue activity

There are no open issues and five open pull requests, but no issues or pull requests were merged in the last month. The unresolved pull requests modestly weaken evidence of active maintenance.

Repo popularity

The repository has eight stars, zero forks, and two watchers. Low popularity is supporting evidence only, but it provides little external evidence of maturity or broad review.

Workflow audit

All five workflows were analyzed, with no untrusted checkouts or script injection, but all 12 action references are unpinned. The audit also found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow and three workflows with top-level write permissions, so automation hygiene is a genuine concern.