diepxuan/laravel-magento

The package has had no commits in the last three months and only one release in the past year. Its matching repository, clear README, MIT license, and non-deprecated stable release provide useful support, but the workflows use unpinned actions and the repository has no security policy.

Latest 1.1.8

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 3 releases across about 26 months, with 1 release in the last 12 months and a median interval of about 9.5 months. The latest release is recent, but the slow cadence limits evidence of active maintenance.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last three months. Although it was pushed recently, the measured short-term activity provides weak evidence of ongoing maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance concern rather than proof of a defect.

Security policy

The repository has no security policy. For a package handling Magento API credentials, this leaves vulnerability reporting and response expectations unclear.

Workflow audit

Both workflows were analyzed successfully with no dangerous triggers, sinks, or audit findings, and permissions are scoped read-only or at job level. However, both of the two action references are unpinned, leaving their resolved code mutable.