Package Health

eliuflorez/laravel-pubnub

Usable with caveats: the package is licensed, documented, and backed by a matching repository, but it has had no release or commit activity since July 2023. Its tiny, untested project and lack of security processes make long-term maintenance uncertain.

Latest 1.0PackagistPackagist

50%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

This release is the package's only release, published about 3 years ago, with no releases in the last 12 months. That is strong evidence of a stagnant project, although a small integration package may need few releases.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package having received no updates since its initial release. This materially increases abandonment and compatibility risk.

Repo popularitycaution

The repository has 0 stars and 0 forks and only 1 watcher, providing little evidence of community review or support. Popularity is supporting evidence rather than decisive on its own, so this is a caution rather than a severe risk.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. For a small PHP integration this is a meaningful maintenance and transparency gap.

Security policycaution

The repository has no security policy. This does not prove a security defect, but it leaves vulnerability-reporting and response practices undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Eliu Florez

Direct Dependencies

DependencyLast ReleaseScore
pubnub/pubnub
Version ^6.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform