igedeon/laravel-whatsapp
This is a usable, apparently active package with a stable major version, 36 releases in 308 days, a non-deprecated registry listing, a matching repository, tests, CI workflows, and a clear MIT license. The main concern is that repository activity reports no commits or active maintainers in the last 3 months despite the frequent release history and a repository push on the assessment date, creating uncertainty about sustained maintenance; the small two-person maintainer base and limited security-policy and workflow-permission hygiene add moderate risk. Overall, it is reasonable to consider, but adoption should include monitoring for continued releases and repository activity.
72%
Total Score
63
100
89
80
Health Score Breakdown
Two registry maintainers provide some continuity, but the small maintainer base leaves limited redundancy if either becomes inactive.
The repository is owned by an individual user rather than an organization, so there is no organizational backing or maintainer redundancy beyond the two registry accounts.
No commits and no active maintainers are reported for the last 3 months, which is a meaningful maintenance concern; the frequent release history and current repository push partly compensate but do not establish sustained activity.
Only two stars and no forks or watchers provide little community validation, but popularity is supporting evidence and does not by itself make a small package unhealthy.
Composer is used as the build tool, but no security-scanning tools are detected; this is a hygiene gap rather than evidence that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Carlos Trujillo |
| Sebastian Diaz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/database Version ^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 26 days ago
- Created
- 11 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.