smskin/laravel-billing

The package includes tests, a substantial README, and automated security tooling. Its source repository matches the package and is not archived, but workflow dependencies are all unpinned and the project has a thin recent activity record.

Latest 2.0.8

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a limited publishing base. The matching repository shows the package is tied to the same individual owner, so this is a small resilience concern rather than evidence of abandonment by itself.

Release history

There have been no releases in the last 12 months, and version 2.0.8 was published on March 27, 2025. This suggests maintenance may be slowing, despite the package having 10 releases overall.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with no registry releases in the last year, this is meaningful evidence of slowing maintenance.

Security policy

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a billing-related library.

Workflow audit

All four workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 9 action references are unpinned, which leaves routine workflow dependencies exposed to upstream changes.