lenorix/laravel-comments

The package is straightforward to integrate, with clear documentation, a changelog, and a small runtime dependency set. Repository automation, tests, and Dependabot provide useful project hygiene, but the project remains early-stage.

Latest v0.3.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 48 days old with three releases, all published within roughly one day. This shows active initial development but provides little long-term maintenance history.

Repo bus factor

One contributor made 20 of 21 recent commits, creating a high concentration risk. Organization backing and a second active contributor provide some handoff capacity, so this is a concern rather than a severe abandonment signal.

Security policy

The linked repository has no security policy. This reduces transparency around vulnerability reporting for a package handling comments, moderation, and notifications.

Version stability

Version v0.3.0 is not yet at a stable major version, so its API and behavior may still change substantially. It is not marked as a prerelease, which partly offsets that concern.

Workflow audit

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions. The audit found no untrusted checkout, script injection, or high-confidence security findings, so this is workflow hygiene caution rather than a severe risk.