spatie/checkout

The MIT license, documented release notes, tests in the repository, and matching source repository are positives. Its release history and recent commit activity show a long-maintained gap, while the name resemblance creates an avoidable adoption risk.

Latest 2.0.3

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package is reported to borrow the identity of the much more established spatie/backtrace, with 6,098,011 monthly downloads versus none for this package. Although artifact overlap is zero and the README does not identify it as the lookalike, the identity signal remains a serious adoption risk.

Release history

The latest registry release was in December 2016, nearly nine years ago, with no releases in the last 12 months. That is strong evidence of an aging dependency even though it has nine total releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the stale registry release history, this points to limited current maintenance capacity.

Repo tooling

The repository uses Composer for builds, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, not a standalone dependency blocker.

Security policy

No repository security policy was found. This reduces transparency for reporting and handling vulnerabilities, particularly for a dependency with no recent release activity.