Package Health

xianghuawe/laravel-archivable

It includes tests, a readable README, a stable release, and no install-time scripts. However, repository activity stopped about ten months ago, the project has one maintainer, and the declared MIT license conflicts with the detected Apache-2.0 license file.

Latest 1.0.5PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the last push being about ten months ago, this is the strongest abandonment warning.

Licensecaution

The manifest declares MIT, but the artifact and repository license file was detected as Apache-2.0. The mismatch creates avoidable licensing uncertainty despite the presence of a license file.

Maintainerscaution

Only one account has registry publish access. That is a thin publishing base for a user-owned project and increases continuity risk if the maintainer becomes inactive.

Project backingcaution

The repository is owned by an individual user rather than an organization. This is consistent with the single registry maintainer and offers limited visible organizational continuity.

Release historycaution

The package is about ten months old and has five releases, all within its first few weeks, with no later release shown. This indicates an initially active but now quiet release history.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

xianghuawe

Direct Dependencies

DependencyLast ReleaseScore
laravel/framework
Version ^9.0|^10.0|^11.0

Weekly Downloads

Info

Last Published
10 months ago
Created
10 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform