devraeph/laracart

The package includes a matching MIT license, a substantial test suite, and no install-time scripts. It lacks a security policy or scanning tools, leaving maintenance and security response dependent on the small project team.

Latest 2.0.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package is backed by a personal GitHub account rather than an organization, so the small registry maintainer base provides limited visible continuity if the owner stops maintaining it.

Release history

The package has 148 releases, but none in the last 12 months and the latest release was in June 2022, indicating prolonged inactivity.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the multi-year release pause and raising abandonment risk.

Repo popularity

The repository has zero stars, forks, and watchers. This is weak supporting evidence of limited adoption, but it does not outweigh the direct maintenance signals.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-maintenance gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Luke Policinski

DevRaeph

Direct Dependencies

Dependency	Last Release	Score
illuminate/events Version ~5.5.0\|~5.7.0\|~5.8.0\|^6.0\|^7.0\|^8.0\|^9.0	—	—
illuminate/session Version ~5.5.0\|~5.7.0\|~5.8.0\|^6.0\|^7.0\|^8.0\|^9.0	—	—
illuminate/support Version ~5.5.0\|~5.7.0\|~5.8.0\|^6.0\|^7.0\|^8.0\|^9.0	—	—