vergil-lai/laravel-oss-filesystem
This is a healthy but young package with a clear MIT license, matching repository, readable documentation, tests, a complete small source tree, stable releases, and recent development activity. The main concerns are its short 48-day history, single-maintainer and single-contributor bus factor, modest adoption, absent security policy, and lack of automated workflow evidence; these warrant caution for long-lived or critical dependencies but do not currently indicate abandonment or unfitness. The package is not deprecated, the repository is active and unarchived, and it has no install-time lifecycle scripts.
78%
Total Score
60
50
83
90
Health checks
Eight runtime dependencies, including the Laravel, Flysystem, Alibaba OSS, and package-specific components, create meaningful dependency surface area for a relatively young package, though this is plausible for its adapter role.
Only one registry account has publish access. This is a modest publishing-resilience concern, although registry access alone does not establish actual maintenance activity.
The repository is owned by an individual user rather than an organization, so there is no organizational backing to offset the concentrated maintainer base.
The package is only 48 days old with four releases and a median interval of about 17 days, showing active early development but limited long-term maturity evidence.
One contributor made all 9 commits in the last 3 months, with a 100% commit share, creating a significant single-maintainer continuity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Vergil Lai |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/flysystem Version ^3.19 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
alibabacloud/oss-v2 Version ^0.4 | — | — |
illuminate/container Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.