Package Health/oneduo/laravel-human-keys

oneduo/laravel-human-keys

The source includes tests, a changelog, a clear license, and automated dependency scanning. No registry release has appeared for more than three years, repository work has stopped, and the release workflow has high-confidence automation concerns plus no pinned actions.

Latest v0.1.2

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases exist, with no release in the last three years; this is strong evidence of abandonment risk despite the initially short release interval.

Repo commit activity

There were no commits and no active maintainers in the last three months, reinforcing the release-history evidence of stalled maintenance.

Workflow audit

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is serious hygiene risk but not independently catastrophic.

Lifecycle scripts

The package runs a post-autoload-dump install-time script. This adds execution during installation and warrants caution, although the signal does not show a destructive or unusual script.

Repo issue activity

There are no new or closed issues or pull requests in the last month, while three pull requests remain open; this suggests limited current project activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Charaf Rezrazi

Direct Dependencies

Dependency	Last Release	Score
tuupola/ksuid Version ^2.1	—	—
illuminate/contracts Version ^9.0\|^10.0	—	—
godruoyi/php-snowflake Version ^2.1	—	—
spatie/laravel-package-tools Version ^1.13.0	—	—