Package Health/james.xue/laravel-ali-green

james.xue/laravel-ali-green

It has a clear MIT license, tests, release notes, and a matching repository, with no install-time scripts. The small maintainer base, absent recent commits, and workflow audit issues leave meaningful maintenance and automation concerns.

Latest v3.1.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. For this individually owned project, that represents a real bus-factor concern, though the repository's tests and documentation provide some supporting project structure.

Project backing

The repository is owned by an individual account rather than an organization, so the single registry maintainer does not have visible organizational backing to compensate for the thin maintainer base.

Release history

The package has 15 releases since April 2020, but its latest registry release was in July 2023 and it had no releases in the following 12 months. This is a meaningful sign of slowed maintenance for a dependency that may need framework or API updates.

Repo commit activity

There were no commits and no active maintainers in the three months measured. Combined with the old latest registry release, this raises abandonment and compatibility risk.

Security policy

The repository has no security policy. That is a transparency gap for reporting and handling vulnerabilities, although it is not evidence that the package is unsafe by itself.