Package Health/ryangjchandler/laravel-json-settings

ryangjchandler/laravel-json-settings

The package is documented, licensed, and backed by a matching repository with tests and security tooling. Its only release is from February 2022, recent commit activity is absent, and workflow checks include high-confidence unpinned references and a spoofable bot condition.

Latest v0.1.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Project backing

The registry namespace and repository are owned by the same individual, providing consistent ownership context. This is a solo-maintainer project rather than organization-backed infrastructure.

Release history

There has been only one release, on February 14, 2022, with no releases in the last 12 months. That long period without updates raises abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has seen no recent release activity. The repository was last pushed in October 2023, so maintenance capacity is uncertain.

Version stability

The assessed version is the sole v0.1.0 release and is not a stable major version. This limits evidence of long-term maturity, although it is not marked as a prerelease.

Workflow audit

All 11 action references are unpinned, and the audit found high-confidence issues involving a spoofable bot condition and an unpinned container image. The pull_request_target workflow has no untrusted checkout or script-injection finding, so these are workflow hygiene concerns rather than a decisive safety failure.