notifyme/laravel

This is a usable but very young package: it has a clear MIT license, a complete small package tree with tests, no install-time lifecycle scripts, stable v1.1.0 versioning, and recent activity from two equally contributing maintainers. However, it has only two releases over 49 days, no security policy or security-scanning tooling, and no repository popularity or issue history, so its long-term maintenance and security-process maturity remain unproven. The package is not deprecated or archived, and the repository README explicitly references the package, which supports its legitimacy as the linked source.

Latest v1.1.0

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual user rather than an organization, so maintenance continuity depends on a relatively small personal ownership base.

Release history

The package is only 49 days old with two releases and a 49-day median release interval, so its maintenance track record is limited and long-term stability is not yet established.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured, leaving a modest security-process hygiene gap.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and coordinated response for a package that handles API credentials and event delivery.