Package Health/hpwebdeveloper/laravel-env-settings

hpwebdeveloper/laravel-env-settings

This is a well-documented, actively developed Laravel package with a permissive MIT license, extensive tests, a substantial repository file tree, CI and security tooling, and no deprecation or archival indicators. However, it is very young at 17 days, has released 12 versions in that period, and all recent commits come from one contributor; the single-maintainer bus factor, install-time lifecycle scripts, absent security policy, and several workflows with top-level write permissions create meaningful adoption and operational risks. Overall it appears usable for a dependency, but its long-term maturity and maintenance resilience are not yet established.

Latest v1.7.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package defines post-install-cmd and post-update-cmd scripts, which expand installation-time execution and warrant review before adoption even though no maliciousness conclusion is drawn here.

Maintainers

Only one registry maintainer is listed. This is not itself evidence of poor ownership, but it provides little publishing redundancy for a young package.

Project backing

The repository is owned by an individual user rather than an organization, so there is no provided organizational backing to compensate for the concentrated maintainer activity.

Release history

The package is only 17 days old but has 12 releases, including 11 in the last 12 months and a median interval of about 16 hours; this shows strong activity but limited time to establish maturity and release stability.

Repo bus factor

All 25 recent commits came from one contributor, giving the project a single-person bus factor and increasing abandonment or continuity risk if that contributor becomes unavailable.