mateffy/laraperf

The package has clear documentation, a license, repository tests, release notes, and automated dependency scanning. Its small ownership base and workflow weaknesses add maintenance and publishing risk.

Latest 1.3.1

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

A post-autoload-dump install script runs during Composer installation, adding a supply-chain execution surface; the signal provides no evidence that the script is harmful.

Release history

Four releases landed over 154 days, but the median interval is only about 1 hour and 26 minutes, indicating a concentrated early release burst rather than a proven long-term cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, a concrete warning that active maintenance may have stalled.

Security policy

No repository security policy was found, leaving vulnerability-reporting expectations unclear for a package that instruments application database behavior.

Workflow audit

All four workflows were analyzed, but all 9 action references are unpinned and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is workflow hygiene and automation risk rather than a severe standalone failure.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Lukas Mateffy

Direct Dependencies

Dependency	Last Release	Score
illuminate/console Version ^11.0\|\|^12.0\|\|^13.0	—	—
illuminate/support Version ^11.0\|\|^12.0\|\|^13.0	—	—
illuminate/database Version ^11.0\|\|^12.0\|\|^13.0	—	—
illuminate/contracts Version ^11.0\|\|^12.0\|\|^13.0	—	—
spatie/laravel-package-tools Version ^1.16	—	—