kamikx/laravel-jodit

The package is well documented, tested, licensed, and actively developed, with no deprecation or archive warning. Its young project age, highly concentrated commits, absent security policy, and unpinned workflow actions leave meaningful maintenance and build-integrity concerns.

Latest 1.0.4

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by the same individual namespace as the package and is user-owned, so the source ownership is consistent but does not provide organization-level backing.

Release history

The package is only 49 days old with four releases, and releases arrived roughly every 21 hours during its initial launch. This shows early activity but provides little evidence of long-term maintenance.

Repo bus factor

Two contributors are active, but one made 42 of 44 commits, leaving maintenance heavily dependent on a single person. The repository is user-owned rather than organization-owned, so there is no shown organizational handoff capacity to offset that concentration.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. This is a modest process gap for a package handling uploads and storage scopes.

Security policy

The repository has no security policy, reducing clarity about vulnerability reporting and response for a package that includes file upload and browsing features.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kamil Donoval

Direct Dependencies

Dependency	Last Release	Score
illuminate/http Version ^11.0\|^12.0\|^13.0	—	—
illuminate/view Version ^11.0\|^12.0\|^13.0	—	—
illuminate/routing Version ^11.0\|^12.0\|^13.0	—	—
illuminate/support Version ^11.0\|^12.0\|^13.0	—	—
intervention/image Version ^4.0	—	—