lumphp/laravel-config

Risky to adopt without confirming that it still meets your needs: the last release was over five years ago and only two releases are recorded. It has organization backing, a license, and no deprecation or install-time scripts, but maintenance evidence is thin.

Latest v8.36.2

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, with the latest published over five years ago and no releases in the last 12 months. This is strong evidence of abandonment risk, despite the package not being deprecated.

Package scaffolding

The artifact has no README, which makes integrating this small library less transparent, although missing tests and a changelog are normal packaging practice. GitHub release notes exist for this version and provide some release documentation.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. While this may reflect a tiny stable project, it provides no evidence of ongoing maintenance.

Repo popularity

The repository has zero stars, forks, and watchers, so there is little visible community adoption or external attention. Popularity is supporting evidence rather than decisive proof, but it adds to the uncertainty around this stale package.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tooling is present. The absence of scanning is a hygiene gap rather than evidence that the package is unsafe.