Package Health/salah/laravel-custom-fields

salah/laravel-custom-fields

The repository has no commits or active maintainers in the last three months, despite eight releases in the past year. One workflow has a high-confidence bot-condition issue, and all 12 action references are unpinned; licensing, tests, and dependency scope are otherwise sound.

Latest v1.2.5

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have stalled after the latest release.

Workflow audit

All 12 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; top-level write permissions in three workflows add mild exposure, though no untrusted checkout or script-injection sink was found.

Maintainers

One registry publishing maintainer leaves a thin publishing base, although the repository is user-owned rather than organization-backed; this modestly increases continuity risk.

Project backing

The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational continuity to offset the thin maintainer base and quiet commit activity.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Salah

Direct Dependencies

Dependency	Last Release	Score
illuminate/support Version ^10.0\|\|^11.0\|\|^12.0	—	—
illuminate/contracts Version ^10.0\|\|^11.0\|\|^12.0	—	—
propaganistas/laravel-phone Version ^5.0	—	—
spatie/laravel-package-tools Version ^1.92	—	—