Package Health/phunky/laravel-messaging-groups

phunky/laravel-messaging-groups

The package has clear documentation, repository tests, release notes, and a small runtime dependency footprint. Pin this exact version unless you are comfortable with its limited maturity and workflow hygiene concerns.

Latest 0.1.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 3 releases since its first release about 5 months ago, despite an initially regular median interval of about 8 days; this is a short track record rather than established maturity.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern for a package whose latest registry release is still young.

Security policy

The repository has no SECURITY.md policy. This is a transparency gap, though it is less significant for a small early-stage library than evidence of abandonment would be.

Version stability

Version 0.1.1 is not a stable major release, so compatibility expectations are lower than for a mature 1.x package.

Workflow audit

All 12 analyzed action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script injection was found, so this is a workflow hygiene caution rather than a standalone severe risk.