laravelista/comments

The package is licensed, documented, and has a stable 4.5.0 release with release notes. Its repository shows no recent commit or issue activity, while security-policy and scanning coverage are absent, so pinning this version is safer than expecting ongoing compatibility work.

Latest 4.5.0

Packagist

56%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 30 releases since November 2016, but none in the last 12 months and the latest registry release was in March 2021—about five and a half years ago. This is a substantial maintenance concern despite the historically regular release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. That indicates little current maintenance capacity, although the repository is not archived and was pushed in March 2024.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with 20 open issues and 3 open pull requests. This supports the broader picture of limited recent activity, but is not severe on its own.

Repo tooling

Composer is used as the build tool, but no security-scanning tools were detected. The missing scanning coverage is a modest hygiene concern alongside the maintenance slowdown.

Security policy

The repository has no security policy file. This is a transparency and vulnerability-reporting gap, though it does not by itself indicate that the package is unsafe to depend on.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mario Bašić

Direct Dependencies

Dependency	Last Release	Score
illuminate/http Version ^8.0	—	—
erusev/parsedown Version ^1.7	—	—
illuminate/queue Version ^8.0	—	—
illuminate/routing Version ^8.0	—	—
illuminate/support Version ^8.0	—	—