ryangjchandler/bearer

A complete README, repository tests, MIT licensing, and a recent release provide useful adoption and transparency signals. The repository has made no commits in the last three months, and CI uses an unpinned container image, so pinning this release is prudent.

Latest v2.1.1

Packagist

66%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has existed since May 2021 and released v2.1.1 recently, but only one release appeared in the last 12 months. The recent release offsets some concern, while the low current cadence warrants caution.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. A release was published recently, but the lack of observed commit activity reduces confidence in ongoing maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Workflow audit

Both workflows were analyzed completely and have no untrusted checkout or script-injection findings, but the audit found a high-confidence unpinned container image and all four action references are unpinned. This weakens CI supply-chain hygiene without making the release unfit on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ryan Chandler

Direct Dependencies

Dependency	Last Release	Score
illuminate/http Version ^11.0\|^12.0\|^13.0	—	—
illuminate/database Version ^11.0\|^12.0\|^13.0	—	—
illuminate/contracts Version ^11.0\|^12.0\|^13.0	—	—
spatie/laravel-package-tools Version ^1.16	—	—