acdphp/laravel-multitenancy

Lifecycle scriptscaution

A post-autoload-dump Composer lifecycle script runs during installation, adding execution during dependency setup; the signal provides no evidence that it is unsafe, so this is a limited caution.

Repo bus factorcaution

All recent commits came from one contributor, creating a real continuity risk; organization ownership provides some ability to hand maintenance off but does not remove the concentration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving repository security checks less visible.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a framework integration package.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers or audit findings, but all 5 action references are unpinned, weakening build reproducibility and update control.