nikjaysix/laravel-ical

The package has a clear README, release notes for this version, and a small dependency surface. Its old pre-1.0 release line and lack of repository activity leave maintenance and compatibility uncertain. Pinning this exact version is safer than taking future updates.

Latest v0.0.3

Packagist

34%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 3 releases, all concentrated in July 2017, with no releases in the last 12 months and roughly nine years since the latest release. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, with the last push in July 2017. This materially increases the risk that compatibility and defects will not be addressed.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tooling is present. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policy

The linked repository has no security policy. For a small, dormant package this leaves vulnerability reporting and response expectations unclear.

Version stability

The assessed version is v0.0.3 and is not a stable major release, so compatibility expectations are weaker. The absence of prerelease labeling does not compensate for the long-stalled pre-1.0 line.