Package Health

goldnead/statamic-entitlements

This is a young but currently healthy release with strong maintenance and repository transparency signals. It has nine releases in 36 days, 45 commits from two active contributors in the last three months, a non-archived repository pushed recently, a stable non-prerelease version, a matching repository with a README reference, and a documented security policy. The artifact includes a README, changelog, license, and no install-time lifecycle scripts; repository tests and CI compensate for tests not being packaged. The main concerns are limited project history, zero repository popularity, one registry maintainer, no configured security-scanning tool, and one open pull request, but none indicates abandonment or an immediate dependency-health failure.

Latest v1.4.0PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Maintainerscaution

Only one account has registry publish access, which creates some publishing continuity risk; repository activity from a second active contributor provides partial operational support but does not remove the single-publisher concentration.

Project backingcaution

The repository is owned by the individual user goldnead rather than an organization, so there is no organizational succession backing; active two-person commit activity partially offsets this limitation.

Release historycaution

Nine releases in 36 days, with a median interval of about 3 days, demonstrate active publishing, although the package's 36-day age leaves limited evidence of long-term durability.

Repo issue activitycaution

There are no open issues and one open pull request, with no issues or pull requests merged in the last month; the lack of issue backlog is positive, while the limited collaboration history is mildly cautionary.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is no external adoption evidence; this is a supporting weakness rather than a health verdict for a young package.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Adrian Goldner

Direct Dependencies

DependencyLast ReleaseScore
statamic/cms
Version ^6.0
laravel/framework
Version ^12.40|^13.0
goldnead/statamic-brand-context
Version ^1.13
goldnead/statamic-identity-contracts
Version ^1.0

Weekly Downloads

Info

Last Published
12 days ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform