threeleaf/biblioteca

Biblioteca 2.3.0 is usable and shows meaningful maintenance activity: it is not deprecated or archived, has four releases in the last 12 months, a stable major version, repository tests and documentation, active issue and merge activity, and an organization-owned repository with matching package references. The main concerns are that all 13 recent commits came from one contributor, registry publishing access is held by one maintainer, the package runs a post-install script, and the repository lacks a security policy and explicit workflow token permissions. These issues make the package a reasonable but not low-risk dependency, particularly for projects that need strong maintainer redundancy and supply-chain transparency.

Latest 2.3.0Packagist

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

John A. Marsh

Direct Dependencies

Dependency	Last Release	Score
illuminate/support Version ^12.0 || ^13.0	—	—
illuminate/database Version ^12.0 || ^13.0	—	—