mll-lab/laravel-graphql-playground
Adds the GraphQL Playground IDE to your Laravel app, giving you an in-browser interface to explore schemas, write queries, and test your GraphQL API. Integrates smoothly with Laravel GraphQL servers such as Lighthouse and is quick to install and configure.
mll-lab/laravel-graphiql) is the actual product signal here. It supports a decision about how your team handles upstream tooling churn — whether to pin, fork, or migrate proactively.composer.json. It argues for keeping dev-only tooling in require-dev with a documented migration path rather than in the runtime dependency graph.Consider it only in one narrow situation: you maintain an existing Laravel + GraphQL service (most likely on Lighthouse) that already depends on this package, you are not ready to change your tooling this sprint, and you need to keep a working explorer behind your existing auth middleware. In that case treat it as legacy maintenance — pin the version, keep it in require-dev or behind an environment flag, and put a migration ticket on the board.
Look elsewhere — or skip the category — in every other case:
mll-lab/laravel-graphiql, which is the same vendor's active replacement and the intended upgrade path.To executives: This is a small, free, developer-tooling package that embedded an API explorer into Laravel apps. It is archived, unmaintained since early 2022, and officially replaced by its author. The recommendation is simple: no new spend, no new adoption, and a low-effort migration for any team still using it. The upside of the migration is reduced dependency risk; the downside is measured in hours, not sprints. Treat it as housekeeping, not a roadmap item.
To engineering: The wrapper is a thin service provider around an IDE whose upstream project has also been superseded. Its successor, mll-lab/laravel-graphiql, is the sanctioned path and is a near drop-in for most setups. Recommended posture: (1) do not add this package to new services; (2) inventory any service still serving a playground route, and confirm that route is dev-only and authenticated — that check matters more than the swap itself; (3) migrate to the successor or to a standalone IDE, and keep whichever you choose in require-dev; (4) prefer a tool that survives its maintainer. The one thing to avoid is a quiet fork that nobody owns.
To the product owner: the deliverable is a one-line policy — "no new adoptions, migrate existing usages to the maintained successor, verify the route is never publicly reachable" — plus a tracked ticket. Cost is small and bounded; the risk of doing nothing is an unpatched query-execution endpoint on a package no one is watching.
How can I help you explore Laravel packages today?