Package Health/mohamedsamy902/laravel-media-vault

mohamedsamy902/laravel-media-vault

This is a usable but very young package with good baseline transparency: it has an MIT license, substantial documentation, a changelog, repository tests, a matching source repository, no deprecation, no install-time lifecycle scripts, and a recent commit and release. However, it is only 28 days old, its four releases were concentrated in short bursts, all recent commits come from one contributor, and the repository lacks a security policy, security scanning, and explicit top-level workflow permissions. The package is therefore reasonable to evaluate or adopt with normal review, but its limited operating history and single-maintainer concentration warrant caution for critical production dependencies.

Latest v1.1.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a genuine resilience concern for a user-owned project, although repository activity shows that the account is currently active.

Project backing

The repository is owned by an individual user rather than an organization, so there is no organizational backing to offset the single-maintainer concentration.

Release history

The package is only 28 days old with four releases, and the median interval is about 39 minutes, indicating a short and bursty release history rather than established long-term maintenance evidence.

Repo bus factor

One contributor made all 3 recent commits, creating a concentrated bus factor and increasing continuity risk if that maintainer becomes unavailable.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral for a very new package, but provides little evidence of broader maintenance or user support.