alagiesinghateh/laravel-docmaker

Licensecaution

The artifact contains a license file and declares MIT, which is positive; however, detected MIT and ISC text does not exactly match the declared license and warrants a small transparency check.

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts. These may be legitimate, but they add install-time behavior that consumers should understand before adoption.

Package file treecaution

The package includes more than 17,000 files, including node_modules and system/cache artifacts such as .DS_Store and PHPUnit cache files. This is poor release hygiene and increases artifact size and review burden.

Release historycaution

Only one release exists, published about 13 months ago, with no releases in the last 12 months. That leaves maintenance continuity unproven for a package intended as a Laravel integration.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling is present. That is a modest project-hygiene gap rather than evidence that the release is unsafe.