Package Health/dyrynda/eloquent-composite-primary-keys

dyrynda/eloquent-composite-primary-keys

The MIT license, focused dependency set, and release notes make the package easy to inspect. Its minimal repository has no tests or security policy, while the lack of recent project activity leaves compatibility uncertain.

Latest 2.0.0

Packagist

44%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, both in September 2019, with no release in roughly seven years. That is strong evidence of abandonment risk for a framework integration.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the seven-year release gap, this materially raises the risk that framework changes are no longer handled.

Package file tree

The package and repository each contain only four files, consistent with the package's narrowly focused single-trait purpose. This limits transparency about broader project practices but is not by itself a maintenance failure.

Repo popularity

The repository has one star, no forks, and no watchers, providing little evidence of a broad user or contributor base. Popularity is only supporting evidence, but this offers no compensating maintenance signal.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a small PHP package this is a hygiene gap, though it is less significant than the prolonged inactivity.