larabun/lara-bun

This release is well documented, MIT-licensed, test-backed, and comes from a repository that is not archived and matches the package, but it is explicitly deprecated on Packagist and replaced by rsc-kit/laravel. The README states that new work has moved elsewhere, while the linked repository shows zero commits and zero active maintainers in the last 3 months, making this package a poor choice for a new dependency despite the release being installable and having reasonable artifact hygiene. Existing users may remain functional, but new projects should adopt the replacement instead.

Latest v0.8.4

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the package as abandoned and names rsc-kit/laravel as its replacement. This is a severe maintenance and adoption risk for a new dependency, even though the release remains installable.

Repo commit activity

The linked repository recorded 0 commits and 0 active maintainers in the last 3 months. This aligns with the README's statement that new work has moved to another package and indicates elevated abandonment risk.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher. Low popularity is only supporting evidence, but it suggests limited external adoption and review capacity.

Repo tooling

Composer is used as a build tool, but no security-scanning tools were detected. The missing scanning layer is a transparency and maintenance caution, though it is secondary to the package's deprecation.

Security policy

No repository security policy was found. For a package handling server actions, routing, and PHP callables, this is a meaningful transparency gap.