phpexperts/laravel-env-polyfill
The package has a usable README, repository tests, an MIT license, and no install-time scripts. Its small footprint is reassuring, but the limited security and maintenance evidence leaves more uncertainty than a actively maintained dependency.
62%
Total Score
75
100
81
75
Health Score Breakdown
The package has 10 releases since May 2019, but none in the last 12 months; its latest release was in August 2024. This indicates a mature but currently inactive release line.
The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing maintenance, although it does not by itself prove abandonment for a small stable utility.
The repository has 5 stars, 2 forks, and 1 watcher. This is limited adoption evidence, but popularity is only supporting evidence and does not outweigh the package's other signals.
The linked repository is not archived, which preserves a path for future maintenance. However, its last push was in August 2024, consistent with the release-history concern about inactivity.
The repository has no security policy and no security-scanning tools. For a small package this is a hygiene gap, but it is not evidence of a vulnerability or abandonment on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 PHP Experts, Inc. |
| Theodore R. Smith |
| Taylor Otwell |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 vlucas/phpdotenv Version * | — | — |
0.0.0/composer-include-files Version * | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.