Package Health/grazulex/laravel-apiroute

grazulex/laravel-apiroute

Clear documentation, tests, licensing, and release notes support dependable integration. Workflow references are all unpinned, while recent source activity is concentrated in one contributor and the repository has no security policy or scanning.

Latest v2.2.1

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs a post-autoload-dump install-time script. This is an additional installation behavior developers should account for, although the signal does not show that the script is unsafe.

Project backing

The repository is owned by a GitHub user rather than an organization, so the concentrated contributor activity is not offset by visible organization backing. This reinforces the single-maintainer concern.

Repo bus factor

One contributor made 100% of the one commit in the last three months. This creates a high single-person maintenance dependency for this user-owned project.

Repo commit activity

Only one commit was recorded in the last three months, despite the recent releases and merged pull requests. This is limited direct development activity and lowers confidence in sustained maintenance capacity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest transparency and maintenance safeguard gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jean-Marc Strauven

Direct Dependencies

Dependency	Last Release	Score
nesbot/carbon Version ^3.10	—	—
illuminate/http Version ^12.0\|^13.0	—	—
illuminate/routing Version ^12.0\|^13.0	—	—
illuminate/support Version ^12.0\|^13.0	—	—
illuminate/contracts Version ^12.0\|^13.0	—	—