williamcruzme/laravel-fcm
The package has a clear README, matching repository, MIT license, and no install-time scripts. Its small project footprint and lack of security scanning leave less evidence for long-term support.
45%
Total Score
25
100
81
83
Health Score Breakdown
The latest release was in July 2021, with no releases in the last 12 months. The package released regularly at first, but the long subsequent pause is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers over the last three months, while its last push was in July 2022. This indicates maintenance has effectively stopped for over four years.
The package and repository are owned by the same individual account. That is consistent ownership, but it does not provide the redundancy of organization backing.
Composer is used for the build, but no security scanning tools are present. The missing scanning reduces maintenance and supply-chain transparency evidence, though it is not severe on its own.
The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency gap for a package that handles notification credentials and device data.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 williamcruzme |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version * | — | — |
illuminate/notifications Version * | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.