docusign/esign-laravel

The package is licensed, documented, and backed by the DocuSign organization, with no install-time scripts. Its maintenance has stopped since April 2023, and the artifact strongly overlaps a better-known package, so adoption carries substantial liability.

Latest v1.1.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package borrows the identity of docusign/esign-client, has 66.7% artifact overlap, and has far fewer releases and downloads. Although its README describes a Laravel wrapper, the identity overlap remains a serious adoption risk.

Release history

Only two releases exist, with no releases in the last 12 months and a median interval of about 706 days. The latest release was published in April 2023, indicating a very slow and now stagnant release history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no recent updates. This materially increases abandonment risk.

Repo tooling

Composer is used as the build tool, but no security scanning tools are reported. The missing scanning is a modest hygiene gap, not a severe health risk on its own.

Security policy

The repository has no security policy. This reduces transparency for reporting and handling issues, though it is outweighed by the organization ownership and existing license and documentation.