Package Health

nikandlv/laravel-cafebazaar

Risky to adopt for new projects: the package has had no release or repository activity for nearly seven years. It remains licensed, documented, and correctly backed by its matching repository, but its maintenance appears effectively dormant.

Latest 1.0PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

This is a single-release package whose latest release was published nearly seven years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, despite the stable 1.0 version.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. This materially weakens confidence that compatibility or defects will be addressed.

Security policycaution

The repository has no security policy. This is a transparency gap for a package handling API authentication and purchase verification, although it is less decisive than the package's prolonged inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nikan Dalvand

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^6.3
—
—
illuminate/support
Version 5.8.*
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform