Package Health

vincentbean/laravel-plausible

Healthy and reasonable to adopt, with strong package hygiene, tests, release notes, and a correctly linked repository. Maintenance is the main caveat: no commits or active maintainers were recorded in the last three months, and the repository lacks a security policy.

Latest 2.4.0PackagistPackagist

79%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Project backingcaution

The registry namespace and repository owner both identify VincentBean, and the repository is user-owned rather than organization-owned. The single registry maintainer therefore reflects a small maintainer base and warrants some caution.

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months. The recent release partly compensates for this, but the short-term lack of development activity creates a maintenance caveat.

Repo issue activitycaution

There are no open issues or pull requests, and no recent issue or pull-request activity. This is consistent with a small, quiet project but gives limited evidence of an active user and contributor community.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than a severe risk because the repository has other build and test structure.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is not evidence that the package is unsafe by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Vincent Bean

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^7.4
illuminate/contracts
Version ^12.0|^13.0

Weekly Downloads

Info

Last Published
6 months ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform