Package Health

sfneal/dependencies

Documentation, tests in the repository, and release notes provide useful maintenance context. The long release gap, no commits in the last three months, and completely unpinned workflow actions reduce confidence in ongoing upkeep.

Latest 2.1.1PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historycaution

The package has 35 releases since July 2021, but none in the last 12 months and the latest registry release was in May 2024, indicating a significant maintenance gap.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a concrete sign of currently inactive development and increases abandonment uncertainty.

Repo issue activitycaution

Three issues and three pull requests remain open, with no new or closed items in the last month; this is limited evidence of unresolved maintenance work.

Security policycaution

No repository security policy file was found, leaving vulnerability-reporting guidance less formal than it could be.

Workflow auditcaution

All seven workflows were analyzed without high-confidence audit findings or dangerous untrusted triggers, but all 13 action references are unpinned, weakening build reproducibility and update control.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Stephen Neal

Direct Dependencies

DependencyLast ReleaseScore
sfneal/caching
Version ^3.0|^4.0
—
—
laravel/framework
Version ^8.75|^9.0|^10.0|^11.0
—
—
sfneal/string-helpers
Version ^1.0
—
—
sfneal/laravel-helpers
Version ^2.4
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform