viewmend/laravel
This is a well-scaffolded, clearly licensed, non-deprecated Laravel package with a linked, recently updated repository, tests, changelog, documentation, security policy, read-only workflow permissions, and no install-time lifecycle scripts. However, it is very young at 19 days with only three releases, has just one active contributor responsible for all four recent commits, has minimal repository adoption (1 star and no forks), and lacks automated security-scanning tooling. The package appears reasonable to depend on with normal early-stage-project diligence, but its short history and single-maintainer concentration create meaningful continuity risk.
76%
Total Score
75
100
83
100
Health Score Breakdown
The repository is owned by a user account rather than an organization, so there is no organizational backing signal to offset the single-maintainer concentration.
The package is only 19 days old and has three releases, with a median interval of about 10 days; this shows active initial iteration but provides little evidence of long-term maintenance.
One contributor made all four commits in the last three months, so maintenance is fully concentrated in a single person without evidence of handoff capacity.
The repository has only 1 star, no forks, and no watchers. This is weak supporting evidence for maturity, although low popularity alone is not a decisive health problem for a young package.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning automation is a hygiene gap, though it is partly offset by the repository's other security controls.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 viewmend/sdk Version ^1.3 | — | — |
guzzlehttp/psr7 Version ^2.7 | — | — |
illuminate/console Version ^12.0 || ^13.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 26 days ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.