ikepu-tp/laravel-admin

The package has clear MIT licensing, a focused dependency set, release notes, and a repository that matches its name. Its last release was about three years ago, with no recent commits, while the build workflow leaves both referenced actions unpinned.

Latest v1.1.0

Packagist

54%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, both from August 2023, and there have been no releases in roughly three years. This is substantial evidence of limited ongoing maintenance for a Laravel integration package.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the roughly three-year release gap, this indicates a largely inactive project rather than merely a quiet release cadence.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security scanning tooling is present. This is a modest transparency and maintenance gap, not a severe risk on its own.

Security policy

The repository has no security policy. For a package handling administrator and user-management functionality, this weakens the project's documented process for reporting and addressing security issues.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers or audit findings, and it scopes permissions at job level. However, both of its action references are unpinned, leaving the build exposed to changes in referenced action versions.