Package Health

gregoriohc/laravel-attributum

It has a clear MIT license, a matching source repository, and no install-time scripts. The sole release is marked as unfinished, with no newer release or recent repository activity, making long-term maintenance uncertain.

Latest v0.0.1PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

60

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has only one release, published about 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no recent maintenance. Its long inactivity materially raises abandonment risk.

Repo popularitycaution

The repository has 2 stars, 0 forks, and 1 watcher. Low adoption is supporting evidence of limited maturity, though it is less important than the observed lack of maintenance.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is secondary to the package's much more significant maintenance concerns.

Version stabilitycaution

The latest version is v0.0.1 and the package is not a stable major release. Combined with the unfinished release notes, this indicates an immature dependency.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Gregorio Hernández Caso

Direct Dependencies

DependencyLast ReleaseScore
illuminate/support
Version 5.1.*|5.2.*|5.3.*
illuminate/database
Version 5.1.*|5.2.*|5.3.*

Weekly Downloads

Info

Last Published
10 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform