Package Health

rekrios/laravel-framework

Licensing and packaging are clear, and the repository has a security policy. The small maintainer base and completely unpinned workflow actions leave little safety margin.

Latest v8.11.2PackagistPackagist

15%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

50

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Using this package? Scan for Free

Health Score Breakdown

Release historydanger

The package has 599 releases, but its latest registry release was on October 28, 2020, with no releases in the last 12 months. That long pause is strong evidence of abandonment for a framework dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the repository's last push in 2020, this indicates sustained abandonment risk.

Repository archiveddanger

The repository is not formally archived, but it was last pushed on October 28, 2020. The non-archived status does not compensate for the observed lack of subsequent activity.

Maintainerscaution

Only one registry account has publish access. A single publisher is a meaningful continuity risk here because the repository also shows no recent commit activity or broader backing.

Project backingcaution

The registry namespace and repository owner are the same personal account, with no organizational backing shown. This provides limited evidence of durable project support.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Taylor Otwell

Direct Dependencies

DependencyLast ReleaseScore
ramsey/uuid
Version ^4.0
—
—
opis/closure
Version ^3.6
—
—
symfony/mime
Version ^5.1
—
—
nesbot/carbon
Version ^2.31
—
—
psr/container
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform