tinigin/laravel-cart

Usable with caveats: it is a young package with recent releases and active source changes, but all recent commits come from one contributor. The repository has no security policy or security scanning, so adoption should include normal review and monitoring.

Latest 1.0.8

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace and repository are both owned by the same individual account, and the repository is not organization-backed. This is consistent ownership, but it provides limited redundancy for long-term maintenance.

Release history

The package is only 34 days old, but it has had 9 releases, including releases within the last month. This shows active early development, though there is not yet a long maintenance record.

Repo bus factor

One contributor made all 9 commits in the last 3 months, creating a substantial single-maintainer continuity risk. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset that concentration.

Repo popularity

The repository has 0 stars, forks, and watchers, providing no supporting evidence of community adoption or external review. Popularity is only supporting evidence, so this lowers confidence more than it determines the verdict.

Repo tooling

Composer is used as the build tool, but no security-scanning tools are present. The missing scanning is a transparency and maintenance gap, although it is not by itself evidence that the package is unsafe.