Package Health/stuyam/laravel-phone-validator

stuyam/laravel-phone-validator

The README, MIT license, small dependency set, and lack of install-time scripts make the package straightforward to inspect and integrate. Maintenance evidence is weak, with no commits in the last three months, no recent releases, and no security policy. Adopt only with a plan to replace or maintain it if Laravel or Twilio compatibility changes.

Latest 1.0.10

Packagist

56%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace and repository owner are the same individual account, giving a clear ownership link but no organizational backing to offset the thin maintenance capacity.

Release history

The package has 11 releases since August 2016, but none in the last 12 months and the latest release was in April 2023. This is meaningful abandonment risk, though the repository remains active enough to avoid the most severe band.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. This directly weakens confidence that defects or dependency changes will be addressed promptly.

Repo tooling

Composer is used as the build tool, but no security-scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. For a package that handles Twilio credentials and phone lookups, this reduces transparency about how vulnerabilities should be reported and handled.