mxl/laravel-api-key

The package is clearly identified and includes a readable guide, tests, a matching MIT license, and no install-time scripts. Its last release was about six years ago, with no recent commits or security policy, so maintenance and vulnerability response are significant concerns.

Latest v1.0.1

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, and the latest was published about six years ago; there have been no releases in the last 12 months. This is strong evidence of an aging, possibly abandoned dependency.

Repo commit activity

The repository recorded no commits and no active maintainers during the measured three-month period, reinforcing the long release gap rather than showing ongoing maintenance between releases.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap and does not outweigh the stronger maintenance concerns.

Repository archived

The linked repository is not archived, so the project remains administratively available. Its last push was about six years ago, which limits the reassurance this provides.

Security policy

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This is a meaningful transparency gap for a package focused on request authorization.