Package Health

mauri870/laravel-installer

Unfit to use: the package was abandoned on Packagist and has had no release or repository activity for about 10 years. It is licensed, tested, and transparently backed by a matching repository, but those positives do not offset its replacement recommendation and prolonged inactivity.

Latest 1.0.2PackagistPackagist

15%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

57

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned and points users to a replacement, making this release unsuitable for a new dependency despite the absence of a specific deprecation message.

Release historydanger

The package has only three releases, all concentrated in January 2016, with no releases in the last 12 months; this indicates prolonged abandonment rather than merely a slow cadence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's decade-long lack of releases and leaving no evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling is reported; this is a minor transparency gap rather than the reason the package is unfit.

Repository archivedcaution

The linked repository is not formally archived, which is a small positive, but its last push was in February 2016 and the activity signals show that it is effectively inactive.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mauri de Souza Nunes

Direct Dependencies

DependencyLast ReleaseScore
symfony/console
Version ~2.3|~3.0
—
—
symfony/process
Version ~2.3|~3.0
—
—
guzzlehttp/guzzle
Version ~4.0|~5.0|~6.0
—
—

Weekly Downloads

Info

Last Published
10 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform