marcreichel/igdb-laravel

The package has solid documentation, tests, release notes, and a matching repository, with no install-time scripts. Its current maintenance pause and unpinned GitHub Actions reduce confidence for a long-term dependency.

Latest 5.3.1

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace and repository are owned by the same individual, so the package has direct ownership alignment but no organizational backing shown by this signal. This is acceptable for a small project but leaves a relatively narrow support base.

Release history

The package has 67 releases since 2019, but none in the last 12 months; the latest release was over a year before collection. This indicates a meaningful maintenance slowdown despite its established history.

Repo commit activity

There were zero commits and zero active maintainers in the preceding three months. Combined with no registry releases in the last 12 months, this is a concrete abandonment-risk concern.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is a moderate documentation gap rather than evidence that the package is unfit.

Workflow audit

All six workflows were analyzed successfully with no reported findings, dangerous triggers, or untrusted checkouts. However, all 10 action references are unpinned, leaving the build exposed to moving action code.