Package Health/worksome/laravel-telemetry

worksome/laravel-telemetry

Usable with caveats: the package has clear organization backing, tests, release notes, and a matching repository, but maintenance has recently gone quiet. Install-time automation and permissive workflow settings also warrant review before adopting it broadly.

Latest v0.5.4

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits from any active maintainer in the last three months, a concrete sign of recently stalled maintenance and the main adoption concern.

Dangerous workflows

One workflow uses pull_request_target for Dependabot auto-merge, which carries elevated workflow risk, though no untrusted checkout or script-injection patterns were detected.

Lifecycle scripts

The package uses a post-autoload-dump install-time script, which adds execution during installation and deserves review, although one standard Composer lifecycle hook is not by itself a severe concern.

Release history

The package has 19 releases since January 2023, but only one release in the last 12 months, indicating a slower recent release cadence despite an established history.

Repo issue activity

There are no open issues and two open pull requests, but no issues or pull requests were merged in the last month, offering limited evidence of ongoing maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Oliver

Direct Dependencies

Dependency	Last Release	Score
open-telemetry/api Version ^1.4	—	—
open-telemetry/sdk Version ^1.7	—	—
illuminate/contracts Version ^12.0 \|\| ^13.0	—	—
open-telemetry/sem-conv Version ^1.36	—	—
php-http/guzzle7-adapter Version ^1.1	—	—