mouyong/laravel-config

The MIT license and matching source repository make the package easy to inspect, but its README still leaves usage as TODO and its install scripts add avoidable complexity. The small project has no security policy or scanning, and its source has been inactive for over three years.

Latest v1.0.5

Packagist

18%

Total Score

Maintainer Stability

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned and names plugins-world/laravel-config as its replacement. A package-level deprecation is a severe adoption risk because future fixes and support should be expected elsewhere.

Release history

The package has six releases, but none in the last 12 months; its latest release was over three years ago. This indicates substantial abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. There is no provided maintenance activity to offset that risk.

Lifecycle scripts

The package runs post-install and post-update Composer scripts. These scripts deserve scrutiny because they execute during dependency operations, but their presence alone is not evidence of poor maintenance or unsafe behavior.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, especially for a package already showing no recent activity.