Package Health

jeffersongoncalves/laravel-github-contributions

Healthy and suitable to use, with minor maintenance and workflow caveats. It has active recent development, repository tests, release notes, a clear README, and a matching source repository; the main concerns are its very short release history, single registry maintainer, and incomplete workflow permission declarations.

Latest v1.1.0PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Lifecycle scriptscaution

The package uses a post-autoload-dump lifecycle script. This is a point requiring review because installation-time code can affect consumers, although the provided signal does not show that the script is dangerous.

Maintainerscaution

Only one account has registry publish access. That is a real continuity concern for a user-owned project, though repository activity shows that development is currently occurring.

Project backingcaution

The registry namespace and repository are owned by the same individual user. This provides clear ownership, but not the redundancy or handoff capacity of organization backing.

Release historycaution

Only two releases have been published over about 88 days, so the project has limited demonstrated maturity. Recent repository activity partly compensates for the short history, but long-term maintenance is not yet established.

Repo bus factorcaution

Two contributors were active recently, with the leading contributor responsible for 68.75% of commits. This is somewhat concentrated but not a single-contributor project, so it is acceptable with limited continuity risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jefferson Gonçalves

Direct Dependencies

DependencyLast ReleaseScore
illuminate/support
Version ^11.0|^12.0|^13.0
—
—
spatie/laravel-package-tools
Version ^1.14.0
—
—

Weekly Downloads

Info

Last Published
3 months ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform