railroad/railchat

The package has been unchanged for about 15 months, and no maintainers were active in the last three months. It includes tests, a matching source repository, and organizational backing, but it lacks licensing and security-policy documentation.

Latest v3.0.4

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

License

No declared license, license file, or repository license file was detected. This creates a real adoption and redistribution concern with no provided evidence covering it.

Release history

The package has 12 releases since July 2021, but none in the last 12 months; the latest release was about 15 months ago. This indicates meaningful maintenance slowdown despite a previously active release cadence.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months. Together with the stale release history, this raises abandonment risk.

Security policy

The repository has no security policy. For a package handling chat access and user-management operations, this reduces transparency around vulnerability reporting.

Workflow audit

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Its one action is unpinned, which is a minor reproducibility and supply-chain hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
get-stream/stream Version ^5.1	—	—
laravel/framework Version ^11.9	—	—
railroad/permissions Version ^3.0	—	—
get-stream/stream-chat Version ^2.11	—	—