coolsam/nested-comments

The MIT license, substantial README, release notes, tests, changelog, and Dependabot support make the package transparent and maintainable in principle. The small owner base and workflow audit issue add some operational risk; pin this version while checking for a newer maintained release.

Latest v1.1.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a limited publishing base for a user-owned project, although registry access alone does not establish who actively maintains it.

Project backing

The repository is owned by an individual user rather than an organization, so the single registry maintainer provides limited visible backing. This increases bus-factor concern but does not prove abandonment.

Release history

The package has only 3 releases, with no releases in the last 12 months; its latest release was about 15 months ago. This is a meaningful sign of slowing maintenance for a framework integration package.

Repo commit activity

The repository had 0 commits and 0 active maintainers in the last 3 months. Combined with the absence of registry releases in the last year, this is a clear maintenance concern.

Repo issue activity

There were no new or closed issues and no new or merged pull requests in the last month, despite 4 open issues and 6 open pull requests. This suggests limited recent project activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sam Maosa

Direct Dependencies

Dependency	Last Release	Score
kalnoy/nestedset Version ^6.0.5	—	—
filament/filament Version ^3.2	—	—
spatie/laravel-package-tools Version ^1.15.0	—	—
awcodes/filament-tiptap-editor Version ^3.5.12	—	—
tangodev-it/filament-emoji-picker Version ^1.0.3	—	—