Package Health/leandrogoncalves/prometheus_client_laravel

leandrogoncalves/prometheus_client_laravel

Usable with caveats: the package is licensed, has a substantial source tree, tests, release notes, and no unsafe install scripts, but it has had no release or repository commit activity for over three years. The README also points consumers to a different Composer package, which needs verification before adoption.

Latest 1.3

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases were published, all concentrated in May 2023, with no release in the following three years and four months. That is a meaningful maintenance and abandonment concern for a library dependency.

Project backing

The registry namespace and repository owner match, but both are associated with an individual account rather than an organization. This offers direct ownership consistency without evidence of broader institutional backing.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially reduces confidence that defects or compatibility issues will be addressed.

Repo package mention

The repository name matches the package, but its README does not mention the package and instead shows installation for promphp/prometheus_client_php. That mismatch warrants verifying that this release is the intended Laravel package and not an incorrectly linked or repackaged project.

Security policy

No repository security policy is provided. This is a transparency gap, but it is less severe than the demonstrated inactivity and does not alone make the package unfit.