zephia/laravel-mercadolibre
Risky to adopt: the package has had no registry release for nearly ten years and no repository commits for more than eight years. It remains licensed, documented, and linked to a matching organization-owned repository, but those positives do not offset the apparent abandonment.
40%
Total Score
50
100
67
75
Health Score Breakdown
The latest release was published nearly ten years ago, with no releases in the last 12 months. That long gap is a substantial abandonment risk for a Laravel integration package.
There were zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising a strong maintenance concern.
There was no issue or pull-request activity in the last month, with one issue still open. This provides no evidence of current project support.
The repository is not archived, which is a positive, but it was last pushed more than eight years ago. Its unarchived status does not compensate for the prolonged inactivity.
The repository has no security policy. For an integration package handling API credentials, this is a transparency gap, although it is secondary to the much stronger abandonment signals.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mauro Moreno |
| Cristian Jimenez |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/socialite Version ^2.0 | — | — |
zephia/mercadolibre Version ^0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.