phunky/laravel-messaging

Workflow safeguards need tightening, with all 12 actions unpinned and a high-confidence bot-condition warning. The package has clear documentation, repository tests, release notes, licensing, and recent releases, but its short history limits maturity.

Latest 0.1.0

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance warning for a young package, despite its earlier release cadence.

Lifecycle scripts

A post-autoload-dump script runs during installation. This is common Composer packaging behavior, but it adds install-time execution that developers should account for.

Project backing

The package is backed by an individual user account rather than an organization, so the single registry maintainer represents a genuinely thin ownership base.

Repo issue activity

There are no open issues and one open pull request, but no issues or pull requests were merged in the last month, offering limited evidence of active support.

Repo popularity

The repository has no stars, forks, or watchers. Popularity is only supporting evidence, so this lowers external validation modestly but does not determine health.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Phunky

Direct Dependencies

Dependency	Last Release	Score
illuminate/events Version ^13.0	—	—
illuminate/support Version ^13.0	—	—
illuminate/database Version ^13.0	—	—
illuminate/contracts Version ^13.0	—	—
spatie/laravel-package-tools Version ^1.16	—	—