shelfwood/settings-yaml

The package has tests, a stable release line, and no install-time scripts. Its source repository provides limited evidence of ongoing ownership and lacks a consumer-facing README.

Latest v1.0.3

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health checks

Package scaffolding

Tests are present in both the artifact and repository, but the package has no README; that makes integration harder for a Laravel library. The missing changelog is normal packaging practice.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the three months before collection, a meaningful sign that maintenance may have paused.

Repo package mention

The repository name does not exactly match the package name, and no README mention was available, so the link provides weaker package-identity evidence than expected.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency gap rather than a severe dependency risk.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Shelfwood

Direct Dependencies

Dependency	Last Release	Score
illuminate/cache Version ^11.0\|^12.0	—	—
illuminate/config Version ^11.0\|^12.0	—	—
illuminate/support Version ^11.0\|^12.0	—	—
shelfwood/markdown-frontmatter Version ^1.0	—	—