The Laravel ecosystem

15 of the 98 packages tracked here are archived, abandoned, without a release in over a year, or behind on Laravel 13. The most installed come first.

1. jenssegers/agent

   No release in two years

   Last release Jun 2020.

   2M installs a month

   Use instead

   mobiledetect/mobiledetectlib last release May 2026

   Built on Mobile Detect, which is still maintained, and its README says every Mobile Detect method is still available, so the library underneath covers most uses without the wrapper.

2. simplesoftwareio/simple-qrcode

   No release in two years

   Last release Feb 2021.

   1.5M installs a month

   Use instead

   bacon/bacon-qr-code last release Apr 2026

   A thin wrapper around BaconQrCode, its only real dependency, which is still maintained.

3. fruitcake/laravel-cors

   ArchivedBehind on Laravel 13

   Its repository is archived, last release Feb 2022, no release allows Laravel 13.

   834.3K installs a month

   Use instead

   Laravel itself

   CORS middleware has been part of the framework since Laravel 9.2, as the package's own README says.

4. fideloper/proxy

   No release in two yearsBehind on Laravel 13

   Last release Feb 2022, no release allows Laravel 13.

   811.6K installs a month

   Use instead

   Laravel itself

   The Laravel 9 upgrade guide replaces it with the framework's own TrustProxies middleware.

5. laravelcollective/html

   AbandonedBehind on Laravel 13

   Marked abandoned on Packagist in favour of spatie/laravel-html, no release allows Laravel 13.

   581.6K installs a month

   Use instead

   spatie/laravel-html last release Feb 2026

   Packagist marks it abandoned in favour of spatie/laravel-html.

6. facade/ignition

   No release in two yearsBehind on Laravel 13

   Last release Jan 2023, no release allows Laravel 13.

   516.8K installs a month

   Use instead

   spatie/laravel-ignition last release Oct 2026

   The Laravel 9 upgrade guide replaces it with spatie/laravel-ignition.

7. nunomaduro/larastan

   Abandoned

   Marked abandoned on Packagist in favour of larastan/larastan.

   439.7K installs a month

   Use instead

   larastan/larastan last release Oct 2026

   Packagist marks it abandoned in favour of larastan/larastan, the same project under its own organisation.

8. beyondcode/laravel-websockets

   ArchivedBehind on Laravel 13

   Its repository is archived, last release Aug 2023, no release allows Laravel 13.

   143.6K installs a month

   Use instead

   laravel/reverb last release Sept 2026

   Its README says it is no longer maintained and points to Laravel Reverb.

9. barryvdh/laravel-cors

   ArchivedBehind on Laravel 13

   Its repository is archived, last release Feb 2022, no release allows Laravel 13.

   125.8K installs a month

   Use instead

   Laravel itself

   The earlier name of fruitcake/laravel-cors. CORS middleware has been part of the framework since Laravel 9.2.

10. timacdonald/json-api

    No release in two yearsBehind on Laravel 13

    Last release Feb 2022, no release allows Laravel 13.

    113.3K installs a month

    Use instead

    Laravel itself

    Laravel 13 ships JsonApiResource in the framework, generated with php artisan make:resource --json-api, and the package's author recommends migrating to it.

11. rennokki/laravel-eloquent-query-cache

    No release this yearBehind on Laravel 13

    Last release Mar 2025, no release allows Laravel 13.

    112K installs a month

    Use instead

    No drop-in replacement

    No successor has meaningful adoption. Laravel's own Cache::remember, or Cache::flexible, around the queries that need caching does the same job explicitly.

12. arcanedev/log-viewer

    No release in two years

    Last release Mar 2024.

    79.2K installs a month

    Use instead

    opcodesio/log-viewer last release Jun 2026

    Does the same job and supports current Laravel.

13. darryldecode/cart

    No release this yearBehind on Laravel 13

    Last release Jul 2025, no release allows Laravel 13.

    57.7K installs a month

    Use instead

    wearepixel/laravel-cart last release Jun 2026

    Its README says it takes this package and carries it on with new features, and it supports Laravel 13.

14. zizaco/entrust

    No release in two yearsBehind on Laravel 13

    Last release Nov 2017, no release allows Laravel 13.

    33K installs a month

    Use instead

    spatie/laravel-permission last release Oct 2026

    The most widely used roles and permissions package for current Laravel. Its schema is different, so moving means migrating role and permission data.

15. vyuldashev/laravel-openapi

    No release in two yearsBehind on Laravel 13

    Last release May 2023, no release allows Laravel 13.

    12.1K installs a month

    Use instead

    dedoc/scramble last release Oct 2026

    Generates the OpenAPI document from the application's own code, with no annotations to keep in step. A different approach from this package's builders.

• mediumOct 2026Laravel relationship inclusion can trigger unauthorized data destructionFixed in 13.27.0, 12.68.0
• criticalOct 2026Laravel TokenGuard authentication bypass through non-string API credentialsFixed in 13.29.0, 12.68.0
• lowSept 2026Laravel: XSS in Debug Page InformationFixed in 13.30.0, 12.69.0
• highJun 2026Laravel Framework: CRLF injection in default email ruleFixed in 13.10.0, 12.60.0
• mediumJun 2026Laravel Framework: Temporary Signed URL Path ConfusionFixed in 13.12.0, 12.61.1