laraflow/sms

The package is clearly licensed, well documented, and backed by an organization with repository tests and security tooling. Its small dependency set and matching source repository help, but the project has gone about 18 months without a registry release and its workflows use broad permissions and unpinned actions.

Latest 0.0.7

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long registry release gap, this is meaningful evidence of stalled maintenance.

Lifecycle scripts

The package runs a post-autoload-dump install-time script. This is a supply-chain exposure that deserves review, although the signal gives no evidence that the script performs harmful actions.

Release history

The package has seven releases over about two years, but no registry release in roughly 18 months. That prolonged release gap lowers confidence in ongoing maintenance.

Repo issue activity

There are no open issues and five open pull requests, but no pull requests were merged in the last month, suggesting limited recent throughput.

Repo popularity

Seven stars and no forks show limited adoption, but popularity is supporting evidence and does not outweigh the stronger maintenance and transparency signals.