johannesclimacus/artisan-factory
The package has clear licensing, documentation, tests, release notes, and security reporting. Its short 19-day history and single active contributor leave maintenance capacity and long-term stability unproven.
68%
Total Score
75
83
75
Health Score Breakdown
The package runs a post-autoload-dump install-time script. This is a point to inspect in Composer packages, though the signal provides no evidence that the script is unsafe or unusually broad.
The package is only 19 days old with three releases, so its maintenance record and compatibility track record are still limited.
All five recent commits came from one contributor, leaving the project dependent on a single maintainer for ongoing fixes and releases.
Version v0.2.0 is not a stable major release, which indicates an immature API and a higher likelihood of breaking changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 johannesclimacus |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/console Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 25 days ago
- Created
- 28 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.