algoyounes/laravel-package-skeleton

Lifecycle scriptscaution

A post-install-cmd script runs during installation, creating additional execution and supply-chain exposure for consumers.

Release historycaution

The package has 19 releases over about two years, but none in the last 12 months, indicating that registry maintenance has stopped or slowed substantially.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a concrete sign of weak recent development activity despite the repository not being archived.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented.

Workflow auditcaution

Both workflows were analyzed with no audit findings or untrusted checkouts, but all 6 action references are unpinned and one workflow grants top-level write access, weakening reproducibility and least-privilege hygiene.