Package Health

lunarphp/core

Frequent releases and organization ownership provide useful continuity. The alpha status, absent security policy, and unpinned workflow reference add avoidable maintenance and release-process risk.

Latest 2.0.0-alpha.6PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Dependency profilecaution

Fourteen runtime dependencies, including Laravel, media, activity, search, permission, and state packages, create meaningful compatibility and update surface, though this is plausible for an e-commerce core.

Package scaffoldingcaution

The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the missing README is a minor integration and transparency gap for a Laravel library.

Repo bus factorcaution

One contributor made 100% of the two recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown to demonstrate it.

Repo commit activitycaution

Only two commits were recorded in the last three months, all from one active maintainer, which is thin recent maintenance evidence compared with the package's release frequency.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving automated dependency or code-risk checks unclear.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Lunar

Direct Dependencies

DependencyLast ReleaseScore
laravel/scout
Version ^10.13.1
—
—
laravel/framework
Version ^12.0|^13.0
—
—
lunarphp/nestedset
Version ^1.0
—
—
spatie/laravel-blink
Version ^1.7.1
—
—
lukascivil/treewalker
Version 0.9.1
—
—

Weekly Downloads

Info

Last Published
24 days ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform