dentro/yalr

The package has a clear README, tests, release notes, matching repository, and MIT licensing. Release activity is sparse and the repository had no commits in the last three months; its workflow also uses three unpinned actions and has no security policy.

Latest v1.6.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

A post-autoload-dump script runs during Composer installation, adding some install-time execution surface, though this signal does not show a suspicious command or behavior.

Release history

The package has existed for about 4 years and 11 months with 10 releases, but only one release in the last 12 months and a median interval of about 166 days indicate a slow cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern.

Repo issue activity

There are four open issues and two open pull requests, but no issues or pull requests were opened or merged in the last month, consistent with limited recent activity.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Rifki Alhuraibi

Muhajirin Ilyas

Direct Dependencies

Dependency	Last Release	Score
illuminate/console Version ^8.0\|^9.0\|^10.0\|^11.0\|^12.0\|^13.0	—	—
illuminate/routing Version ^8.0\|^9.0\|^10.0\|^11.0\|^12.0\|^13.0	—	—
illuminate/support Version ^8.0\|^9.0\|^10.0\|^11.0\|^12.0\|^13.0	—	—
illuminate/contracts Version ^8.0\|^9.0\|^10.0\|^11.0\|^12.0\|^13.0	—	—
illuminate/filesystem Version ^8.0\|^9.0\|^10.0\|^11.0\|^12.0\|^13.0	—	—