vdhruv/laravel-shopify

Usable with caveats: the package is clearly identified, MIT-licensed, stable, and has a usable README, but it has had no release or repository commits for about 2 years and 9 months. Its single-maintainer, low-visibility project also lacks security scanning and a security policy.

Latest 1.2.0

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publishing maintainer is listed, leaving a thin publishing base. The matching user-owned repository provides some continuity, but it does not compensate for the absent recent activity.

Release history

The latest release was published on December 2, 2023, and there were no releases in the following 12 months covered by the signal. This indicates materially slowed maintenance for a package integrating with an external API.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. The repository is not archived, but there is no recent activity demonstrating ongoing maintenance.

Repo popularity

The repository has zero stars, forks, and watchers, so there is little visible external adoption or review to support confidence. Popularity is supporting evidence rather than a standalone health verdict.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than an immediate dependency blocker.