Package Health

mkreftsymfonia/laravel-eloquent-ai

The package has tests, a changelog, a matching repository, and a clear MIT license. Its repository shows no active maintainers or commits for nearly two years, while all 11 workflow actions are unpinned; no security policy adds a smaller transparency gap.

Latest 1.1.0PackagistPackagist

48%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

Only two releases were published, both in November 2024, followed by about 1 year 10 months with no release in the assessed history. That makes the package's maintenance outlook uncertain for a database integration.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. No provided activity signal compensates for this lack of recent maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, but it is less serious than the absence of recent development activity.

Workflow auditcaution

All 11 analyzed action references are unpinned, so workflow dependencies can change without a reviewed package release. The audit found no untrusted checkouts, script injection, or high-severity findings, which limits this to a hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mateusz

Direct Dependencies

DependencyLast ReleaseScore
spatie/once
Version ^3.1
openai-php/laravel
Version ^v0.10.2
illuminate/database
Version ^11.00
illuminate/contracts
Version ^11.0
spatie/laravel-package-tools
Version ^1.14.0

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform