Package Health/wyn/laravel-google-secret-manager

wyn/laravel-google-secret-manager

The package has a stable v1 release, a small runtime dependency surface, clear licensing, and a README with release notes. Its lack of tests and security scanning provides limited assurance, while the small project has little evidence of ongoing maintenance.

Latest v1.1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual account rather than an organization. This does not establish poor health, but it offers less visible backing to offset the single-maintainer and inactivity concerns.

Release history

The package has only two releases, both published in July 2024, with no releases in roughly two years. This is strong evidence of a small or inactive project and lowers confidence in continued maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no recent development activity to offset the concern.

Repo tooling

Composer is used for builds, but no security scanning tools are present. The missing scanning reduces assurance for a package that handles secrets, while the build tooling itself is appropriate.

Security policy

The repository has no security policy. For a package handling Google Secret Manager credentials, this is a transparency and incident-reporting gap, although it is not evidence of malicious behavior.