andach/laravel-attachments-comments

Lifecycle scriptscaution

The package runs a post-autoload-dump lifecycle script, which adds install-time behavior and modest supply-chain exposure, though this is common in Laravel packages.

Release historycaution

The package is about 3 years old but has only 3 releases, with a median interval of about 1 year 5 months and one release in the last 12 months. The latest release is recent, partly offsetting the slow cadence.

Repo bus factorcaution

All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown to share current maintenance.

Repo commit activitycaution

There was one commit in the last 3 months from one active maintainer, indicating current activity but a very thin maintenance cadence.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity alone does not outweigh the recent release and organization backing.