Package Health

vortechstudio/laravel-github-issues

Usable with caveats: the package is licensed, backed by a matching organization repository, and has tests and security tooling. However, it has had only one release and no recorded commits in the last three months, so ongoing maintenance is uncertain; workflow permissions and an install script add operational risk.

Latest v1.0.0PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the last recorded repository push being about 2 years and 2 months ago, this is the strongest concern about abandonment risk.

Dependency profilecaution

Seven runtime dependencies, including Laravel components, a GitHub API client, an OpenAI client, and an HTTP client, create a moderately broad dependency surface. This is reasonable for the package's stated integration role but increases maintenance exposure.

Lifecycle scriptscaution

The package defines a post-autoload-dump install-time lifecycle script. This is a meaningful installation surface that warrants review before adoption, even though the signal does not show that the script is malicious.

Release historycaution

Only one release exists, published about 2 years and 8 months ago, with no releases in the last 12 months. This is substantial evidence of limited ongoing maintenance for a package developers may depend on.

Repo issue activitycaution

There are no open issues and no new or merged pull requests in the last month, although three pull requests remain open. This shows little current project interaction and modestly reinforces the maintenance concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Vortech Studio

Direct Dependencies

DependencyLast ReleaseScore
openai-php/client
Version ^0.8
illuminate/support
Version ^10.0
knplabs/github-api
Version ^3.0
symfony/http-client
Version ^7.0
illuminate/contracts
Version ^10.0

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform