inventas/momentum-lock

The source repository has tests and a clear README, and organization backing adds some continuity. Its four releases landed on one day, with no commits in the last three months, while CI dependencies are unpinned. Pin this version and confirm future Laravel support before adopting.

Latest v0.4.0

Packagist

61%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 110 days old and has four releases, but all four were published on the same day with no later release activity, leaving ongoing maintenance unproven.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. For a package this young, that makes continued support uncertain rather than proving abandonment.

Repo tooling

The project uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unspecified. The package’s clear source and tests provide some compensating transparency, so this is a minor concern.

Version stability

v0.4.0 is not marked as a prerelease, but the 0.x major version signals an API that may still change and warrants care for a dependency.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Boris Lepikhin

Lennart Fischer

Direct Dependencies

Dependency	Last Release	Score
illuminate/auth Version ^12.0\|^13.0	—	—
illuminate/support Version ^12.0\|^13.0	—	—
spatie/laravel-data Version ^4.0	—	—
spatie/laravel-typescript-transformer Version ^2.6	—	—