Package Health

cocosport/rybbit-sdk-for-laravel

This is a promising but very young Laravel package. It has a clear MIT license, substantial documentation, a changelog, repository tests, active recent development, five merged pull requests in the last month, security policy and Dependabot coverage, and a repository that directly matches the package. The main reservations are its 25-day age, pre-1.0 version, rapid release cadence, low adoption indicators, and a small contributor base; these limit demonstrated maturity but are partly offset by an organization-owned repository and two active contributors. It appears reasonable to depend on with normal caution around API stability and early-project evolution.

Latest v0.3.0PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Lifecycle scriptscaution

A post-autoload-dump script is present, which is an install-time execution surface; its single script is not shown as dangerous, but it warrants routine review when adopting a young package.

Release historycaution

The package is only 25 days old, despite having nine releases, and the median release interval is about 20 hours. This demonstrates active iteration but provides limited evidence of long-term maintenance stability.

Repo popularitycaution

The repository has only one star, zero forks, and zero watchers. This is weak adoption evidence, though the package's very young age makes low popularity less conclusive.

Token permissionscaution

Both workflows declare top-level permissions, with one read-only workflow; one update-changelog workflow has top-level write permissions, creating a limited workflow privilege concern.

Version stabilitycaution

The current version is v0.3.0 rather than a stable major release, so API compatibility and maintenance conventions may still change materially.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Carlo Eusebi

Direct Dependencies

DependencyLast ReleaseScore
illuminate/support
Version ^12.0||^13.0

Weekly Downloads

Info

Last Published
21 days ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform