utyemma/larasetting

The package is MIT-licensed, has a README and release notes, and uses Composer plus security scanning. Its repository does not clearly identify the package, and only one maintainer is publishing it.

Latest v1.08

Packagist

57%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publishing access, and the repository is backed by a user rather than an organization. This creates a thin publishing base, although it is not by itself evidence of abandonment.

Release history

There have been no releases in the last 12 months, despite ten releases overall and a recent release at the start of the observed history. This lowers confidence that maintenance is continuing.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the lack of releases in the last year, this is a meaningful maintenance concern.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the link does not clearly establish that this repository belongs to the published package.

Security policy

The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported. The repository does use GitGuardian, which partly compensates for this gap.