bernskiold/laravel-talentlms

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script, which adds execution during dependency installation and therefore a modest supply-chain surface. No stronger lifecycle behavior was reported.

Release historycaution

This release is the package's only release, published 147 days ago, so there is limited evidence of an established release cadence. The stable version and documented repository provide some maturity support.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, leaving current maintenance uncertain. Its last push was in June, so this is a meaningful but not conclusive abandonment signal for a young package.

Workflow auditcaution

The single analyzed workflow uses a pull_request_target trigger with no untrusted checkout or script injection, but it has a high-confidence bot-conditions finding, top-level write permissions, and 1 unpinned action. These workflow hygiene issues increase maintenance and release-process risk without making the package unfit on their own.