Package Health/fromhome/laravel-corporate

fromhome/laravel-corporate

The package has clear documentation, an MIT license, repository tests, and organization backing. Its maintenance appears stalled, and the workflow audit also found avoidable automation weaknesses; avoid adopting it for new production code unless you can maintain it yourself.

Latest 0.1.4

Packagist

48%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in nearly 3 years and 9 months, despite five releases arriving within a short initial period. That long release gap is a substantial maintenance and abandonment concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. Although the repository was pushed in April 2024, current development activity is still absent.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations unclear. Its Dependabot and Psalm tooling provide some compensation but do not replace a reporting process.

Version stability

Version 0.1.4 is not a stable major release, so its API maturity is limited. This is compounded by the absence of releases since 2022.

Workflow audit

All 13 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection finding, so this is a hygiene concern rather than a severe workflow risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nuradiyana

Direct Dependencies

Dependency	Last Release	Score
laravel/framework Version ^9.31	—	—
spatie/laravel-package-tools Version ^1.13.0	—	—
spatie/laravel-query-builder Version ^5.1	—	—
staudenmeir/laravel-adjacency-list Version ^1.0	—	—