bestmomo/laravel-installer

Release historydanger

Only two releases were published, both in February 2016, with no release in roughly 10 years. This is strong evidence of abandonment for a framework integration package.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the past three months, consistent with the last push occurring in 2016. There is no observed maintenance activity to offset the age of the release.

Package scaffoldingcaution

The package includes a README, but the repository has no tests or changelog. The missing tests reduce confidence in safely changing or adapting this installation workflow, while the missing changelog is a smaller concern.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. This adds a modest transparency and maintenance gap, although it does not outweigh the much older release and inactive repository.

Security policycaution

The linked repository has no security policy. For a package that handles application installation and administrator setup, this leaves vulnerability reporting and response expectations unclear.