Package Health

stepanenko3/laravel-version

Risky to adopt for new projects: the package has been effectively dormant for over four years, despite having a valid license, documentation, tests in the published artifact, and a matching source repository. It may still work, but ongoing compatibility and maintenance are uncertain.

Latest v1.4.3PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

All four releases arrived within roughly one day, and there has been no release in over four years. This strongly suggests the package is no longer actively maintained.

Repo commit activitydanger

The repository has had no commits and no active maintainers in the last three months, with the last push over four years ago. The non-archived status does not compensate for this sustained inactivity.

Dependency profilecaution

Four runtime dependencies, including Laravel, YAML handling, and Symfony Process, are a moderate dependency footprint for this utility. This is not a major concern, though each dependency adds compatibility surface for an old package.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, but it is secondary to the package's prolonged inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Artem Stepanenko
Antonio Carlos Ribeiro

Direct Dependencies

DependencyLast ReleaseScore
pragmarx/yaml
Version ^1.0
—
—
symfony/process
Version ^3.3|^4.0|^5.0|^6.0
—
—
laravel/framework
Version >=5.5.33
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform