adevesa/laravel-simple-otp

Lifecycle scriptscaution

The package runs a post-autoload-dump lifecycle script during installation. This is worth understanding because it adds install-time behavior, but the signal alone does not show harmful or unusually broad actions.

Maintainerscaution

Only one registry publishing maintainer is listed. The repository is also owned by the same individual rather than an organization, so there is limited visible publishing redundancy and continuity capacity.

Project backingcaution

The registry namespace and repository owner both identify the same individual account, and the repository is user-owned. This provides ownership consistency but no organizational backing to compensate for the single-maintainer base.

Release historycaution

The package has had 3 releases, all concentrated around January 2024, with no releases in the last 12 months despite being about 977 days old. This is a material maintenance concern, although the stable 1.0.2 release reduces version churn.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with no releases in the last 12 months, this indicates limited current maintenance.