modularavel/larapix

Clear licensing, repository tests, and release notes improve transparency. No security policy and minimal adoption leave less evidence for long-term support.

Latest 1.2.0

Packagist

61%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository owner is a personal user account rather than an organization, so the one-person contributor concentration has no visible organizational handoff support.

Release history

The package has only two releases over 511 days, with a median interval of about 441 days. The latest release is recent, but the sparse history provides limited evidence of sustained release maintenance.

Repo bus factor

All 10 recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

All 12 action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The audit was complete, but this combination creates meaningful workflow hygiene and automation risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Casimiro Rocha

Direct Dependencies

Dependency	Last Release	Score
mpdf/qrcode Version ^1.2	—	—
illuminate/support Version ^10.0\|^11.0\|^12.0	—	—
illuminate/contracts Version ^10.0\|^11.0\|^12.0	—	—
spatie/laravel-package-tools Version ^1.16	—	—