larawelp/contracts

Its single PHP runtime dependency keeps integration simple. The repository is active and clearly tied to the package, but there are no tests, no security policy, and no recent commit activity. The minimal 21-character README also leaves consumers with little guidance.

Latest v0.0.13

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a README, but it is only 21 characters and the package and repository have no tests or changelog. The missing tests are a real quality gap for a reusable contracts library, while the missing changelog is a smaller concern.

Repo commit activity

There were zero commits and zero active maintainers in the last 3 months. This weakens evidence of active maintenance, although the recent push and release history provide some compensation.

Repo tooling

Composer is used for the build, but no security scanning tooling is present. For a small library this is a hygiene gap rather than a severe dependency risk.

Security policy

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities.

Version stability

Version v0.0.13 is not a prerelease, but the 0.0 major version signals an immature compatibility contract for consumers.