rawilk/laravel-printing

Clear documentation, licensing, and release notes support day-to-day adoption. The project is actively maintained and not abandoned, but maintenance is concentrated and its workflows use unpinned actions with a high-confidence bot-condition warning.

Latest v4.3.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Lifecycle scripts

A post-autoload-dump install-time script runs during Composer installation. This adds execution surface for consumers, although the signal does not show that the script is malicious or unusually broad.

Project backing

The package and repository are owned by the same individual account, so the source identity is consistent. There is no organizational backing shown to offset the concentrated contributor activity.

Repo bus factor

One contributor made 90% of recent commits, leaving maintenance highly concentrated. A second contributor remains active, but the project is user-owned rather than organization-backed, so this remains a meaningful caution.

Workflow audit

All five workflows were analyzed, but all 11 action references are unpinned, and the audit found a high-confidence bot-conditions issue in the pull_request_target workflow. There is no untrusted checkout or script injection, which limits the severity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Randall Wilk

Direct Dependencies

Dependency	Last Release	Score
guzzlehttp/guzzle Version ^7.5	—	—
mike42/escpos-php Version ^5.0	—	—
illuminate/support Version ^10.0\|^11.0\|^12.0\|^13.0	—	—
spatie/laravel-package-tools Version ^1.2\|^1.13	—	—