Package Health

koshuang/laravel-hexagonal

Usable with caveats: it is a very new pre-1.0 package maintained by one contributor, so long-term stability and continuity are unproven. The repository is active, tested, licensed, and uses basic security and CI tooling, but its short history warrants caution for production use.

Latest v0.2.1PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Project backingcaution

The package and repository are owned by the same individual account, confirming direct ownership but providing no organizational handoff or support structure.

Release historycaution

The package is only 45 days old with three releases, all published within a very short interval, so there is not yet enough history to demonstrate sustained maintenance or release stability.

Repo bus factorcaution

One contributor made all 10 commits during the measured period, creating a meaningful continuity risk if that maintainer becomes unavailable.

Security policycaution

The repository has no security policy, which leaves vulnerability-reporting expectations unclear; this is a transparency gap, though the project does use Dependabot.

Version stabilitycaution

Version v0.2.1 is not a stable-major release, indicating an evolving API and a higher likelihood of breaking changes than a mature 1.x package.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kos Huang

Direct Dependencies

DependencyLast ReleaseScore
symfony/process
Version ^7.4|^8.0
—
—
illuminate/console
Version ^13.0
—
—
illuminate/support
Version ^13.0
—
—
illuminate/filesystem
Version ^13.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform