zqhong/fastd-eloquent

It has a clear README, tests, an MIT license file, and a matching repository with a release for this version. Its small project scope and lack of security policy add modest maintenance concerns; pinning an earlier maintained alternative may be safer.

Latest v2.0.0

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 12 releases since June 2017, but none in nearly four years; the latest release was in October 2022. This is a substantial maintenance warning for a framework integration package.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the long release gap. No provided activity signal compensates for this lack of recent maintenance.

Repo tooling

Composer is used for builds, but no security-scanning tools are configured. That leaves vulnerability detection less transparent than it could be.

Security policy

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is a process gap rather than evidence of an unsafe release.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all 3 action references are unpinned. The workflow has no top-level permissions block, which is acceptable on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

zqhong

Direct Dependencies

Dependency	Last Release	Score
fastd/config Version ^3.0	—	—
doctrine/dbal Version ^2.5	—	—
fastd/container Version ^3.0	—	—
illuminate/events Version ^6.20	—	—
illuminate/database Version ^6.20	—	—