Package Health

frictionlessdigital/laravel-ical

This is a usable, established package with more than seven years of release history, a stable non-prerelease version, an active non-archived organization-owned repository, clear licensing, and no install-time lifecycle scripts. However, maintenance appears sparse: only one release occurred in the last 12 months, the repository recorded no commits or active maintainers in the last three months, and the artifact and repository contain no tests. The absence of repository security policy, security scanning, and explicit workflow token permissions also weakens transparency and CI hygiene. Overall, it is reasonable to depend on with normal review and monitoring, but it does not demonstrate the active maintenance and engineering assurance expected of a highly healthy dependency.

Latest 12.1.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

88

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Package scaffoldingcaution

A README and changelog are present, and GitHub Releases are used, but neither the artifact nor repository contains tests. For a library, the missing test suite is a meaningful maintenance and regression-risk gap.

Release historycaution

The package has existed since March 2019 and has eight releases, but only one release was published in the last 12 months and the median release interval is about 390 days, indicating slow maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Although the repository was recently pushed and a release was published, the lack of sustained commit activity is a meaningful maintenance concern.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 5 watchers, indicating limited adoption and external validation. This is supporting evidence rather than a decisive health failure.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is adequate while security assurance is limited.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Cyrill N Kalita

Direct Dependencies

DependencyLast ReleaseScore
eluceo/ical
Version ^0.16
illuminate/support
Version ^12.0 || ^13.0

Weekly Downloads

Info

Last Published
14 days ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform