miladev/lara-cart

The project has tests, documentation, an MIT declaration, and no install-time scripts. Its release history is nearly three years old, while recent repository activity is absent and the project has little community depth.

Latest 1.3

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry and repository are owned by the same individual account, providing consistent ownership context. There is no organization backing to compensate for the narrow maintainer base.

Release history

The latest of only three releases was published nearly three years ago, with no releases in the last 12 months. This materially raises maintenance and compatibility risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of sustained maintenance despite the recent push timestamp.

Repo popularity

The repository has only 1 star, 1 fork, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it indicates limited external validation and community depth.

Repo tooling

Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a modest transparency gap, not evidence of unsafe code by itself.