Package Health/laracraft-tech/carbon-extensions

laracraft-tech/carbon-extensions

The small codebase is clearly documented, licensed, tested in the repository, and backed by an organization. Workflow hygiene is imperfect, with all eight action references unpinned and two high-confidence audit findings.

Latest v0.2.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases were published, all within roughly six days in April 2023, with no registry release in the following three years; this is a meaningful maintenance concern.

Repo commit activity

No commits or active maintainers were recorded in the last three months, indicating currently quiet development; the recent repository push provides only partial compensation.

Security policy

No repository security policy was found, leaving vulnerability-reporting guidance unclear; this is a transparency gap but not severe for a small library.

Version stability

Version v0.2.1 is not a stable major release, so the pre-1.0 versioning signals some API-change risk, although it is not marked as a prerelease.

Workflow audit

All eight action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are workflow hygiene concerns rather than a standalone severe risk.