monaye/larasort

Release historydanger

The package has had no release in more than eight years: its latest release was February 2018, with zero releases in the last 12 months. This is strong evidence of abandonment for a maintained dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the last repository push occurring in February 2018. This materially increases abandonment risk.

Package file treecaution

The artifact is very small and contains source, Composer metadata, a README, and PHPUnit configuration, but its source names refer to Caruta while the repository files refer to Larasort. That naming inconsistency weakens transparency about what is being published.

Repo popularitycaution

The repository has one star, zero forks, and one watcher, indicating very limited adoption and external visibility. Low popularity alone is not decisive, but it provides little supporting evidence for maturity.

Repo toolingcaution

The repository uses Composer build tooling, which fits the PHP package, but it has no security-scanning tools. The missing scanning is a hygiene gap rather than proof of unsafe code.