Package Health/codearachnid/check-commerce-laravel-sdk

codearachnid/check-commerce-laravel-sdk

The package is clearly documented and includes a release note for this version. Repository tests, a matching license, security policy, dependency scanning, and pinned workflow actions provide useful safeguards.

Latest v0.3.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package uses a post-autoload-dump Composer lifecycle script. This is a supply-chain surface that merits some caution, although no dangerous behavior is shown by this signal alone.

Maintainers

Only one account has registry publish access. The linked repository is also user-owned, so there is no organization backing shown to offset the limited publishing base, though registry access alone does not establish actual maintenance capacity.

Project backing

The registry namespace and repository both belong to the same user account, and no organization backing is shown; this is consistent ownership but does not reduce the single-maintainer continuity risk.

Repo bus factor

All 16 recent commits came from one contributor, creating a meaningful continuity risk for a user-owned project without demonstrated organizational handoff.

Version stability

v0.3.0 is not a stable-major release, so API compatibility may still change before 1.0. It is not marked as a prerelease, which partly offsets that concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Timothy Wood

Direct Dependencies

Dependency	Last Release	Score
illuminate/cache Version ^12.0\|\|^13.0	—	—
illuminate/support Version ^12.0\|\|^13.0	—	—
illuminate/contracts Version ^12.0\|\|^13.0	—	—
codearachnid/check-commerce-php-sdk Version ^0.2	—	—