bamagid/laraswagger

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This is a meaningful operational consideration because dependency installation triggers package code, even though the signal does not show that the script is malicious or unsafe.

Package scaffoldingcaution

A substantial README is present, but neither the package nor repository contains tests or a changelog. For a Laravel documentation generator, the absence of both reduces maintenance transparency and makes regressions harder to assess.

Repo bus factorcaution

All recent repository commits came from one contributor, so maintenance depends entirely on that person and has a high single-contributor risk.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, with 1 active maintainer, indicating limited recent maintenance capacity despite the current release.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. This leaves dependency and repository security hygiene less independently checked.