Package Health/yaroslawww/laravel-zvonok-api

yaroslawww/laravel-zvonok-api

The package is licensed and documented, with repository tests and a security policy. Its release workflow still uses an unpinned container image, adding avoidable maintenance risk.

Latest 1.0.3

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in September 2020, and there have been no releases in roughly six years. Three releases arrived early in the package's life, but that history does not offset the prolonged release gap.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the repository's last push in September 2020. This is strong evidence of abandonment risk.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher, providing little evidence of a broader user or contributor community to support maintenance. Popularity is supporting evidence only, so this reinforces rather than determines the score.

Workflow audit

The single workflow was fully analyzed and has no untrusted checkout or script-injection findings, but its container image is unpinned with high confidence. That leaves the build exposed to changing image contents and is a concrete hygiene weakness.