gabrielmoura/laravel-cep

It includes a readable README, tests, a matching MIT license, and a small dependency surface. Its limited project backing and lack of security tooling leave less assurance for a package that has seen little recent activity.

Latest 1.0

Packagist

48%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 2 years and 9 months ago, with no releases in the last 12 months. This is a substantial maintenance warning for a Laravel integration package.

Repo commit activity

There were no commits and no active maintainers in the past three months. Combined with the single-release history, this materially raises abandonment risk.

Project backing

The project is owned by an individual rather than an organization, so continuity depends on a single maintainer and has limited visible institutional backing.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified. This is a meaningful but not standalone adoption blocker for a small package.