Package Health

vuthaihoc/laravel-xtdb2

Its tests, documentation, and clear MIT licensing make the project easier to evaluate. Treat the beta and its one-day history as a trial dependency rather than a mature foundation.

Latest v0.2.0-beta1PackagistPackagist

64%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package is only 1 day old, with 3 releases clustered within about 40 minutes; this shows active initial publishing but no established maintenance history.

Repo commit activitycaution

The repository records 0 commits and 0 active maintainers in the last 3 months, but the package is only 1 day old, so this is chiefly a lack of history rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This is a transparency gap for a database driver, although it does not by itself indicate that the release is unsafe.

Version stabilitycaution

This release is a beta, and all recent releases are prereleases, so compatibility and API stability remain uncertain.

Workflow auditcaution

All 11 analyzed action references are unpinned, and one workflow grants top-level write permissions; these are avoidable supply-chain hygiene weaknesses. The audit found no untrusted checkout, script injection, or high- or medium-severity findings.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

vuthaihoc

Direct Dependencies

DependencyLast ReleaseScore
symfony/uid
Version ^7.0 || ^8.0
—
—
illuminate/support
Version ^12.0 || ^13.0
—
—
illuminate/database
Version ^12.0 || ^13.0
—
—
vuthaihoc/laravel-db-portable
Version ^0.7
—
—

Weekly Downloads

Info

Last Published
1 day ago
Created
1 day ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform