giauphan/larecipe

Clear documentation, tests, a changelog, and an MIT license make the package straightforward to evaluate and adopt. Support capacity is limited by its single maintainer, absent security policy, and unpinned workflow action.

Latest v1.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, both in March 2024, with no release in about 2 years and 6 months. This is a substantial maintenance concern for a Laravel integration package.

Maintainers

One registry maintainer indicates a thin publishing base and limited continuity if that person becomes unavailable. The linked repository is also user-owned, with no organizational backing shown to compensate.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, consistent with the long gap since the latest release. This weakens confidence in ongoing fixes and compatibility work.

Security policy

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency gap, though it does not by itself make the release unfit.

Workflow audit

The sole analyzed workflow has no top-level permissions block and no dangerous audit findings, but its only action reference is unpinned. That leaves the build exposed to reference changes and is a modest reproducibility concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Phan Nhut Giau

Direct Dependencies

Dependency	Last Release	Score
illuminate/view Version ^5.4\|^6.0\|^7.0\|^8.0\|^9.0\|^10.0\|^11.0	—	—
illuminate/support Version ^5.4\|^6.0\|^7.0\|^8.0\|^9.0\|^10.0\|^11.0	—	—
symfony/dom-crawler Version ^4.1\|^5.0\|^6.0\|^7.0	—	—
erusev/parsedown-extra Version ^0.8.1\|^0.8	—	—