Package Health/rezaulhreza/hugging-face-for-laravel

rezaulhreza/hugging-face-for-laravel

Repository activity is quiet, with no commits in the past three months and four pull requests still open. Workflows also use broad write permissions, unpinned actions, and a high-confidence bot-condition warning, although the package has clear licensing, documentation, tests, and release notes.

Latest v1.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs a post-autoload-dump script during installation. This is a lifecycle hook that deserves awareness, but the signal provides no evidence that it performs unsafe actions.

Project backing

The repository is owned by an individual account rather than an organization, so the single registry maintainer reflects a genuinely thin visible backing structure.

Release history

The package has made no releases in the past 12 months after three releases clustered in February 2025, which weakens confidence in ongoing maintenance. The short historical release interval does not compensate for the prolonged silence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months. This is direct evidence of currently quiet maintenance and raises abandonment risk.

Repo issue activity

There are no open issues and four open pull requests, but none were merged or newly opened in the past month. The unmerged pull requests support the broader picture of limited recent activity.