nramos/translatable

The package has a clear README, repository tests, a changelog, and an MIT license. Its small dependency set and non-archived source are positives, but they do not establish ongoing maintenance.

Latest 1.0.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package released eight times in a short initial burst, but has had no releases in the last 12 months despite being about 13 months old. That weakens evidence of continued maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with no releases in the last 12 months, this is meaningful evidence of stalled maintenance.

Security policy

The repository has no security policy. For a small Laravel library this is a transparency gap, although it is less serious than absent source or abandoned ownership.

Version stability

Version 1.0.1 is a stable major release and is not a prerelease, but 75% of recent releases were prereleases. The stable version is usable, though the release history was somewhat experimental.

Workflow audit

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions. The audit also reports a high-confidence bot-conditions finding in the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script-injection sink, so this remains a hygiene concern rather than a severe workflow risk.