cable8mm/prompt-weaver

The project has clear documentation, tests, release notes, and a steady release history. MIT licensing and a repository that matches the package improve transparency, but the maintainer base remains narrow.

Latest v1.1.1

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

A post-autoload-dump install-time script is present. This is a modest supply-chain and installation-complexity concern because package installation executes lifecycle behavior.

Project backing

The repository owner is an individual user rather than an organization, while the recent commit activity is concentrated in that same contributor. There is no organizational handoff capacity shown by this signal.

Repo bus factor

All 91 commits in the last three months came from one contributor, with a 100% top-contributor share. This creates a real continuity and review risk for a young package.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning layer weakens automated supply-chain oversight.

Security policy

The repository has no security policy. That reduces transparency around vulnerability reporting and response expectations, particularly for a package with image, AI, and CLI functionality.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Samgu Lee

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^3.0	—	—
laravel/ai Version ^0.11.0	—	—
laravel/prompts Version ^0.3.22	—	—
monolog/monolog Version ^3.10	—	—
symfony/console Version ^7.4\|^8.1	—	—