spatie/string

The package is licensed, documented, tested in its repository, and backed by an organization with a matching source project. Maintenance is currently quiet, and its automation uses all 10 actions without pinning, increasing long-term supply-chain exposure.

Latest 3.0.1

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package borrows the identity of spatie/ignition, which has 5,458,993 monthly downloads versus 16,291 here; this is strong evidence consumers may have wanted the lookalike instead.

Release history

The package is mature at over 11 years old with 23 releases, but only one release appeared in the last 12 months, indicating a slow current cadence.

Repo commit activity

There were no commits and no active maintainers in the last three months, which is a meaningful sign of currently quiet maintenance despite the recent release.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policy

The repository has no security policy, so users lack a documented route for reporting vulnerabilities.