Package Health

echolabsdev/prism

The project has a strong release record and an active organization-owned repository with tests, documentation, and a security policy. Recent development has stopped, and all eight workflow action references are unpinned, leaving meaningful maintenance and build-integrity concerns.

Latest v0.100.1PackagistPackagist

66%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months. That is a concrete recent maintenance gap despite the strong release history.

Lifecycle scriptscaution

The package runs post-autoload-dump, post-install-cmd, and post-update-cmd scripts. Composer lifecycle hooks can be normal for a Laravel package, but they add install-time behavior that warrants attention.

Repo issue activitycaution

There were no new issues or pull requests and no merged pull requests in the last month, while 48 issues and 64 pull requests remain open. This indicates a recent slowdown in project response.

Repo toolingcaution

The repository uses Composer and Task, but no security-scanning tools were detected. This is a modest transparency and hygiene gap, partly offset by the separate security policy.

Version stabilitycaution

Version v0.100.1 is not a prerelease and has no recent prerelease share, but the project remains below a stable major version, so compatibility guarantees may be less mature.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

TJ Miller

Direct Dependencies

DependencyLast ReleaseScore
laravel/framework
Version ^11.0|^12.0|^13.0

Weekly Downloads

Info

Last Published
6 months ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform