Package Health/shah-newaz/codecanyon-license-ng

shah-newaz/codecanyon-license-ng

The package has a clear source repository, stable version, and organizational backing. Its single release was nearly six years ago, with no recent commits, tests, changelog, or security policy, while the license declaration conflicts with the detected license.

Latest v1.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package’s only release, published nearly six years ago, with no releases in the last 12 months. That strongly raises abandonment risk.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.

License

The artifact contains license files, but the manifest declares MIT while the detected license is Apache-2.0. The package is licensed, yet the mismatch creates avoidable legal uncertainty.

Package scaffolding

The published package and repository have no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README weakens consumer documentation for a Laravel library.

Security policy

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though the package’s small scope and organizational ownership provide limited context rather than a full remedy.