Package Health/sudo-ecommerce/image-domain-replace

sudo-ecommerce/image-domain-replace

This is a usable, actively published Laravel package with a stable v4.1.2 release, 53 releases in the last 12 months, an MIT license, a non-archived organization-owned repository, no install-time lifecycle scripts, and a small dependency footprint. However, the repository shows only one commit from one active contributor in the last three months, has no tests, changelog, security policy, or security scanning, and has minimal community traction. The organization backing and recent release activity reduce abandonment concerns, but the limited independent maintenance and transparency evidence warrant caution before adopting it for critical functionality.

Latest v4.1.2

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A substantial README is present and the repository uses GitHub Releases, but neither the artifact nor repository contains tests or a changelog. The documentation helps compensate for the missing changelog, while the absence of tests remains a maintenance-quality gap.

Repo bus factor

All recent commits came from one contributor, creating concentration risk. Organization ownership provides some ability to hand maintenance off, so this is a caution rather than a severe standalone risk.

Repo commit activity

Only one commit was recorded in the last three months from one active maintainer. Recent registry releases and the non-archived repository compensate partly, but the observed source-maintenance pace is thin.

Repo popularity

The repository has zero stars, zero watchers, and one fork. This is weak supporting evidence and limits external validation, but popularity alone is not required for a healthy small package.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. The build tooling is appropriate, while the missing scanning reduces security and maintenance transparency.