Package Health

lewnelin/lib-config-middleware

The repository was pushed recently, but the package has had no registry release in over a year and no commits in the last three months. Its proprietary license and lack of tests or security scanning add adoption and maintenance concerns, despite a clear README and stable versioning.

Latest v1.1.1PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Licensedanger

The manifest declares the package proprietary, with no detected license and no license file in either the artifact or repository. That materially limits transparency and may restrict normal open-source use.

Dependency profilecaution

The package has two runtime dependencies and no development dependencies, a small direct dependency surface. The absence of development dependencies also leaves no declared test tooling to support validation.

Release historycaution

The package has had 8 releases since December 2024, but none in the last 12 months; the latest registry release was over a year ago. This indicates stalled publishing even though the repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. This is a meaningful recent-maintenance gap, although the repository's later push timestamp provides some compensating evidence of continued activity.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external evidence of maturity or broad review.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Arthur Nascimento

Direct Dependencies

DependencyLast ReleaseScore
stancl/tenancy
Version ^3.6
laravel/framework
Version ^10.00

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform