noorfarooqy/mpesalaravel

The package has no README or security policy, and its workflow relies on an archived action with both dependencies unpinned. The release is licensed, has an exact GitHub release note, and does not run install-time scripts, but those positives do not offset the maintenance risk.

Latest v1.0.8

Packagist

39%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was over two years ago, with no releases in the last 12 months despite nine releases overall. This indicates substantially reduced maintenance and raises abandonment risk.

Maintainers

Only one registry account publishes the package, which is a thin publishing base for a user-owned project. This adds continuity risk, especially alongside the absence of recent commit activity.

Package scaffolding

The package has no README, which is a real documentation gap for a Laravel integration library, but its exact-version GitHub release includes release notes and missing tests or changelog files are normal for published artifacts.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is a significant maintenance concern, though the repository is not archived.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and handling expectations undocumented. No provided signal compensates for this transparency gap.