Package Health

thehocinesaad/stability-laravel

The clear MIT license, matching source repository, and lack of install-time scripts reduce avoidable adoption risk. However, the package remains a minimal 0.1.0 release with no tests or security scanning, limiting confidence in long-term support.

Latest v0.1.0PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package has only one release, published about 2 years and 10 months ago, with no releases in the last 12 months. This is strong evidence of a stagnant project for a dependency intended for ongoing use.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the long release gap and reinforcing the maintenance concern.

Repo popularitycaution

The repository has 11 stars and no forks, providing little evidence of broad community review or shared maintenance. Popularity is supporting evidence only and does not determine the score.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it does not outweigh the maintenance evidence alone.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Hocine Saad

Direct Dependencies

DependencyLast ReleaseScore
thehocinesaad/stability-php
Version ^0.1.0
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform