Package Health

ianrothmann/rocket-laravel-framework

Its Apache-2.0 licensing and focused source tree make the package easy to inspect. The missing security policy and minimal project safeguards leave little evidence of ongoing care.

Latest 1.0.0PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has 11 releases, but its latest release was in February 2021 and it has had no releases in the last 12 months, indicating prolonged inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and a substantial abandonment risk.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization. This is consistent ownership, but it offers no organizational maintenance backing to offset the inactive history.

Repo popularitycaution

The repository has zero stars and forks and only two watchers. Popularity is not decisive, but these numbers provide no meaningful supporting evidence of active use or review.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest hygiene gap, not evidence that the package is unsafe on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ian Rothmann

Direct Dependencies

DependencyLast ReleaseScore
laravel/framework
Version >=5.4.0
—
—
ianrothmann/laravel-vue-bridge
Version *
—
—
spatie/laravel-translation-loader
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform