Package Health/tomsix/laravel-components-library

tomsix/laravel-components-library

The package includes clear documentation, an MIT license, repository tests, and a matching source repository. The latest release documents Laravel 13 compatibility, but recent development activity is absent and workflow dependencies are not pinned.

Latest v2.3.5

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace and repository are owned by the same individual account, providing clear ownership context, though not the redundancy of organization backing.

Release history

The project is mature, with 31 releases since April 2020, but only one release in the last 12 months. The recent v2.3.5 release provides some evidence of ongoing maintenance, so this is a caution rather than a severe abandonment concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past 3 months. Although the recent release shows some activity, the current development pause lowers confidence in ongoing maintenance.

Repo tooling

Composer is used as the build tool, but no security scanning tooling was detected. This is a modest transparency and maintenance gap, not evidence that the release is unsafe.

Workflow audit

The single workflow was fully analyzed with no audit findings or untrusted checkouts, but all 3 action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene concern.