Package Health

jasonkellydk/larapi-installer

The tiny README, absent tests, and lack of security scanning leave limited support for maintenance and integration. The MIT license, no install scripts, and non-archived repository reduce adoption friction but do not offset the age of this release.

Latest 0.0.1PackagistPackagist

32%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

57

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

This is the package's only release, published about nine years ago, with no releases in the last 12 months. That strongly indicates abandonment risk.

Package scaffoldingcaution

The artifact includes a README, but it is only 38 characters and says it was forked from another project; tests and a changelog are absent, while a GitHub release exists for this version. The limited consumer documentation is a real transparency gap.

Repo issue activitycaution

There are no open issues or pull requests and no activity in the last month. While a quiet issue tracker is not inherently harmful, it provides no evidence of an active maintenance community.

Repo popularitycaution

The repository has one star, no forks, and no watchers, providing little community evidence to offset the package's lack of ongoing release activity.

Repo toolingcaution

Composer is used for the build, providing basic project tooling, but no security scanning tool is configured. This is a modest hygiene concern rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jason Kelly

Direct Dependencies

DependencyLast ReleaseScore
symfony/console
Version ~2.3|~3.0
symfony/process
Version ~2.3|~3.0
guzzlehttp/guzzle
Version ~4.0|~5.0|~6.0

Weekly Downloads

Info

Last Published
9 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform