genealabs/laravel-governor
Risky to adopt: Packagist marks the package abandoned and points to a replacement. The source repository is still active and the release is documented, but recent work is extremely limited and concentrated in one contributor.
38%
Total Score
67
79
88
Health Score Breakdown
Packagist marks the entire package as abandoned and names mike-bronner/laravel-governor as its replacement, which is a major adoption and continuity risk despite the recent 0.22.0 release.
The package has a long history with 178 releases, but only one release in the last 12 months, indicating sharply reduced ongoing maintenance.
All recent repository commits came from one contributor, leaving maintenance dependent on a single active person; organization backing provides some handoff potential but does not remove the concentration risk.
Only one commit was recorded in the last 3 months, so current maintenance activity is very limited even though it has not stopped entirely.
The workflow does not declare top-level token permissions, leaving permissions less explicit than ideal and creating a modest workflow-governance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 GeneaLabs, LLC |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^4.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.