laravelir/cart

The package includes tests, a changelog, a clear MIT declaration, and a matching organization-owned repository. Its one-release history and absent recent commit activity leave maintenance capacity uncertain.

Latest 0.1.0

Packagist

59%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 18 months ago, with no releases in the last 12 months. That leaves little evidence of sustained maintenance.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the single-release history, this is meaningful evidence of weak recent maintenance.

Repo popularity

The repository has 2 stars, 0 forks, and 1 watcher, indicating limited adoption. Popularity is only supporting evidence, so this modestly reduces confidence without determining the verdict.

Repo tooling

Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a modest hygiene gap rather than a direct dependency risk.

Security policy

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap, not evidence that the package is unsafe.