Package Health/hashyoo/entrust-permission

hashyoo/entrust-permission

Risky to adopt: the package has had no release or repository activity for nearly six years, and its very small codebase offers little maintenance evidence. It is not deprecated or archived, and it has a declared MIT license, but ongoing support and security visibility are weak.

Latest v1.1.3

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was nearly six years ago, with no releases in the last 12 months. Although the package reached a stable major version and had 12 releases early on, the long period without updates raises abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's nearly six-year release gap. This is strong evidence that maintenance has stopped.

Package scaffolding

A README is present but only 44 characters long, giving consumers very little integration guidance for a Laravel permissions library. The absence of tests and a changelog in the published artifact is normal packaging practice and is not penalized.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher, providing little community visibility or backup if maintenance is needed. Low popularity alone is not decisive, but it offers no compensating support signal here.

Repo tooling

Composer is used for the build, which is appropriate, but no security-scanning tooling is configured. Given the lack of recent maintenance activity, this leaves little evidence of ongoing dependency or code-health review.