Package Health/geo-sot/laravel-env-editor

geo-sot/laravel-env-editor

The package is licensed, documented, tested, and backed by a source repository that was pushed recently. However, registry releases stopped about 17 months ago, recent commit activity is absent, and the workflows contain high-confidence audit findings.

Latest 3.2.0

Packagist

64%

Total Score

Maintainer Stability

Maturity

Health Score Breakdown

Release history

The package has 24 releases since April 2019, but none in the last 12 months; the latest registry release was about 17 months ago. This indicates slowing or paused release maintenance, despite the established history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. A repository push in the archive signal shows recent repository-level activity, but it does not compensate for the absence of recent commits.

Repo issue activity

There are four open pull requests, with no new or merged pull requests in the last month. This is a modest sign that contribution flow and review activity may be stalled.

Workflow audit

All 12 analyzed action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are workflow hygiene concerns rather than a severe standalone risk.