mfissehaye/laravel-shop

The package includes a substantial README, tests, an MIT license, and no install-time scripts. Its source has seen no commits for about eight years, with no security policy or scanning, so maintenance and transparency risks are substantial.

Latest v0.2.15

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in July 2018, about eight years ago, and there have been no releases in the last 12 months. This strongly indicates abandonment despite the 12 historical releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since 2018. This is a substantial maintenance risk.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these very low figures provide little evidence of broad adoption or community support.

Repo tooling

Composer is used for the build, but no security scanning tools are configured. The missing scanning is a modest hygiene gap, while the build tooling itself is appropriate for the package.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency concern for a package handling shopping, orders, and payment integrations.