Package Health/kargnas/laravel-ai-translator

kargnas/laravel-ai-translator

MIT licensing and no install-time scripts make integration straightforward. Maintenance is concentrated in one contributor, and all eight workflow actions are unpinned, leaving moderate resilience and build-reproducibility concerns.

Latest 1.7.23

Packagist

78%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by a user account rather than an organization, so the concentrated contributor activity is not supported by visible organization backing.

Release history

The package has 56 releases over 814 days and a latest release in August 2026, but only 2 releases in the last 12 months, indicating a slower release cadence. Recent repository activity partly compensates for the limited release flow.

Repo bus factor

Two contributors were active in the last 3 months, but the top contributor made 12 of 13 commits. The second contributor provides limited redundancy, so maintenance remains concentrated.

Security policy

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, though it does not by itself indicate abandonment.

Workflow audit

All four workflows were analyzed with no reported audit findings or untrusted checkout and script-injection paths. However, all 8 action references are unpinned and one workflow grants top-level write access, creating build-reproducibility and permission-hygiene concerns.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sangrak Choi

Direct Dependencies

Dependency	Last Release	Score
laravel/ai Version ^0.10	—	—
symfony/process Version ^5.0\|^6.0\|^7.0\|^8.0	—	—
guzzlehttp/guzzle Version ^6.0\|^7.0	—	—
openai-php/client Version >=0.2 <1.0	—	—
illuminate/support Version ^12.0\|^13.0	—	—