daveismyname/laravel-dropbox
The package has a small user-backed project, no security policy or scanning, and no commits in the last three months. The recent release, release notes, matching repository, and MIT license provide useful transparency, but the registry abandonment status leaves long-term support uncertain.
44%
Total Score
50
75
83
Health Score Breakdown
Packagist marks the entire package as abandoned, with no separate replacement package identified. This is a major maintenance warning even though the linked repository remains active.
Only one registry account has publish access. That is a narrow publishing base and increases continuity risk for a user-owned project.
The package has existed since June 2019 with 19 releases, but only one release appeared in the last 12 months. The recent v3.0.8 release helps, while the low current cadence raises maintenance concern.
There were no commits and no active maintainers in the last three months. The same-day release provides some compensating evidence, but ongoing development activity is thin.
The repository has 10 open issues and 3 open pull requests, with no issues or pull requests closed in the last month. This suggests limited recent maintenance follow-through.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Carr |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^6|^7.8.1 | — | — |
illuminate/support Version ^5.5|^5.6|^5.7|^5.8|^6.0|^7.0|^8.0|^9.0|^10.0|^11.7|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.