fanamurov/larrock-cart

The package includes tests, a declared license, and a coherent source tree. Its six-year release and commit silence, tiny repository audience, and missing security policy leave it risky for a new dependency.

Latest v1.1.13

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in April 2020, with no releases in the last 12 months and only three releases overall. This strongly indicates abandonment risk for a maintained Laravel dependency.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the release history showing no activity since April 2020. This is a substantial abandonment concern.

Package scaffolding

The source includes tests, which is a small positive for maintainability, but the published artifact has no README and no changelog. The missing README reduces consumer transparency for a library.

Repo popularity

The repository has zero stars and forks and only two watchers. Popularity is not decisive, but this provides little evidence of broad adoption or community support.

Repo tooling

Composer is used as a build tool, but no security scanning tools are present. The missing scanning is a hygiene gap rather than proof of an unsafe release.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alexandr Fanamurov

Direct Dependencies

Dependency	Last Release	Score
fanamurov/larrock-users Version ^1.0	—	—
gloudemans/shoppingcart Version ^2.3	—	—
fanamurov/larrock-catalog Version ^1.0	—	—
fanamurov/larrock-category Version ^1.0	—	—