Package Health/kennethsolomon/xero-laravel

kennethsolomon/xero-laravel

The clear license, README, matching repository, and lack of install scripts improve transparency and reduce installation surprises. The small project footprint and absent security policy add modest concerns, while long-term maintenance remains uncertain.

Latest 3.1.2

Packagist

44%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about three years and nine months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for an integration library.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since December 2022. This materially increases maintenance and compatibility risk.

Project backing

The package and repository are owned by the same individual account, so the source identity is consistent. There is no organization backing shown to provide additional maintenance capacity.

Repo popularity

The repository has one star and no forks or watchers. Popularity is only supporting evidence, but these very low adoption indicators provide little evidence of community resilience.

Repo tooling

Composer is used for the build, which fits the PHP package ecosystem, but no security scanning tools are reported. The missing scanning is a modest repository hygiene gap.