Package Health/tyhpdef/spatie-laravel-activitylog

tyhpdef/spatie-laravel-activitylog

The artifact is transparent about being a Composer metapackage, and its Apache-2.0 licensing is consistent. The organization-owned repository is identifiable, but long-term maintenance capacity remains unproven.

Latest 5.1.1

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package is brand new: it has one release, published on the assessment day, and no established release cadence. That limits evidence of continued maintenance, though it does not by itself indicate abandonment.

Repo commit activity

The repository shows 0 commits and 0 active maintainers in the last 3 months. Because the repository was also created on the assessment day, this is mainly a lack of proven history rather than evidence of a collapsed project.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. For a package distributing type definitions, this is a modest supply-chain hygiene gap.

Security policy

The repository has no security policy. This is a transparency gap, although the small metapackage has a limited runtime surface and no security process would be expected to prove health on its own.