alexeybob/laravel-translator

Release historydanger

The latest release was nearly 7 years ago, with no releases in the last 12 months. The package had seven releases over its lifetime, but the long current gap is a substantial abandonment concern.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the release history showing activity stopped in October 2019.

Lifecycle scriptscaution

The package runs post-autoload-dump, post-install-cmd, and post-update-cmd scripts. Install-time execution increases the trust required from dependents and adds avoidable supply-chain exposure.

Maintainerscaution

Only one individual has registry publish access, and the project backing is a personal account rather than an organization. This leaves limited visible publishing continuity if that maintainer stops work.

Security policycaution

The linked repository has no security policy. That reduces transparency about how vulnerabilities should be reported, though it does not by itself show an active security problem.