batnieluyo/receipt-scanner

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, reinforcing that development appears to have stopped for more than two years.

Dependency profilecaution

Eleven runtime dependencies, including AWS, OpenAI, PDF, and Laravel-related packages, create a relatively broad dependency surface for a small package and increase compatibility and maintenance burden.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This is a review point because lifecycle scripts execute during installation, although no provided signal shows that this script is malicious or unusually dangerous.

Maintainerscaution

One registry account has publish access. Because the repository is user-owned rather than organization-backed, this represents a limited publishing and continuity base.

Project backingcaution

The registry namespace and repository owner match, which supports that the linked repository belongs to this package. The owner is an individual rather than an organization, so continuity depends on a small project base.