scrumble-nl/popo

Clear documentation, tests, and a matching source repository make the package straightforward to evaluate. Its workflow uses unpinned actions and the repository lacks security scanning, so pinning this version is sensible.

Latest 2.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

Five runtime dependencies, including Laravel and Spatie packages, create meaningful framework and dependency coupling for this small library, though the profile is understandable from the README and package structure.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last 3 months. This is a maintenance warning, although the recent release and push provide some compensating evidence.

Repo issue activity

There are no open issues and one open pull request, with no issues or pull requests merged in the last month. This is mildly concerning for responsiveness but not evidence of abandonment by itself.

Repo popularity

Five stars and two forks indicate a small user base, but popularity is supporting evidence only and does not outweigh the package's release and testing evidence.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Rico Clark

Luuk de Weijer

Stefan Mermans

Direct Dependencies

Dependency	Last Release	Score
laravel/helpers Version ^1.6	—	—
laravel/framework Version ^10.0\|^11.0\|^12.0	—	—
spatie/laravel-data Version ^4.17	—	—
spatie/laravel-typescript-transformer Version ^2.5	—	—