Package Health

elegantly/laravel-kpi

The MIT license, complete README, repository tests, and Dependabot support provide useful transparency. Maintenance has been quiet for three months, while every workflow action is unpinned and the high-confidence bot-condition finding weakens release automation.

Latest v1.4.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

There have been 22 releases over about two years, but only two in the last 12 months, indicating a slower recent cadence rather than abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of reduced maintenance attention.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 8 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; the pull_request_target trigger and top-level write permission add caution, although no untrusted checkout or script injection was found.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Quentin Gabriele

Direct Dependencies

DependencyLast ReleaseScore
illuminate/contracts
Version ^13.0
—
—
elegantly/laravel-money
Version ^4.0
—
—
spatie/laravel-package-tools
Version ^1.16
—
—
spatie/php-structure-discoverer
Version ^2.2
—
—

Weekly Downloads

Info

Last Published
5 months ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform