hi-folks/lara-sock

The package remains an early-stage v0.0.2 project with no releases in over three years and no recent commits. Documentation, tests, licensing, and a matching organization-owned repository are solid, but the long maintenance gap makes adoption a liability.

Latest v0.0.2

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both within about one day in May 2023, and there have been no releases in the last three years. This is strong evidence of stalled maintenance for a package still at an early version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates no observable current maintenance.

Lifecycle scripts

The package uses a post-autoload-dump install lifecycle script. This adds execution during installation and merits awareness, but the signal alone does not show unsafe behavior or make the release unfit.

Security policy

The linked repository has no security policy. This weakens vulnerability-reporting transparency, although the documented code, tests, and active organization ownership provide some compensating project structure.

Version stability

The assessed release is v0.0.2 and the package has not reached a stable major version. That is consistent with the README's early-stage status and increases compatibility and maturity risk.