Package Health/syriable/laravel-messenger

syriable/laravel-messenger

Usable with caveats: it is a clearly backed, licensed package with tests, release notes, and sensible dependency tooling, but it is still very young and has had no commits or issue activity for about three months. Review its maintenance status before making it a core dependency.

Latest v0.10.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers during the last three months. For a package only about three months old, that is a meaningful abandonment risk despite the recent release history.

Dangerous workflows

One of five workflows uses pull_request_target for Dependabot auto-merge, which can carry elevated workflow risk. No untrusted checkout or script-injection patterns were detected, partly offsetting the concern.

Lifecycle scripts

A post-autoload-dump lifecycle script runs during installation. This is a limited install-time behavior and is not by itself a severe health concern, but it warrants normal review of what the script executes.

Release history

The package is only about 3 months old and has two releases, with the latest arriving shortly after the first. That shows an initial release effort but provides little long-term maintenance history.

Repo issue activity

The repository has 14 open issues and three open pull requests, but no issues or pull requests were created, closed, or merged in the last month. This suggests unresolved work and limited recent responsiveness.