Package Health

splitstack/laravel-typewriter

Usable with caveats: it is a well-documented, tested, licensed package with a matching repository and no deprecation or unsafe workflow findings. However, it is only 64 days old with one release, and all recent commits come from one contributor, so long-term maintenance is unproven.

Latest v0.1.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Release historycaution

The package is only 64 days old and has a single release, so there is little release history to demonstrate sustained maintenance or compatibility stability.

Repo bus factorcaution

One contributor made all two recent commits, leaving maintenance dependent on a single person with no demonstrated handoff capacity.

Repo commit activitycaution

Only two commits were recorded in the last three months, showing limited observed activity for a new package, though the repository has not gone completely inactive.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; its security scanning tools provide some compensation but do not replace a reporting process.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
illuminate/console
Version ^11.0|^12.0|^13.0
illuminate/support
Version ^11.0|^12.0|^13.0
spatie/laravel-data
Version ^4.0
phpstan/phpdoc-parser
Version ^2.0
spatie/laravel-typescript-transformer
Version ^3.0

Weekly Downloads

Info

Last Published
2 months ago
Created
2 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform