leoleoasd/laravel-api

The MIT license and matching source make its origin and reuse terms clear. Documentation is unfinished, and the small project offers little evidence of a review or response process. Pin v1.0.1 rather than expecting ongoing fixes.

Latest v1.0.1

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, with the latest about eight years ago and none in the last 12 months. This is strong evidence of abandonment risk for a dependency that may need fixes.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The inactive source makes ongoing maintenance unlikely.

Package scaffolding

The artifact includes a README and release notes for this version, but the README leaves usage as TODO and the project has no tests or changelog. Missing tests are normal in published artifacts, while the unfinished usage guidance is a genuine documentation gap.

Repo tooling

The project uses Composer, which provides basic build structure, but no security-scanning tooling was detected. That leaves dependency and vulnerability review less visible.

Security policy

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance weakness, though not severe on its own.