bixacloud/bixa

Licensecaution

The artifact declares MIT and contains a license file, so it is licensed, but detected files include GPL-3.0 as well as MIT. That mismatch requires checking which bundled components impose additional terms.

Lifecycle scriptscaution

The package runs post-autoload-dump, post-create-project-cmd, post-root-package-install, and post-update-cmd scripts. These are common Composer hooks but increase installation and update behavior that consumers must review.

Release historycaution

The package has only one release, published 470 days ago, with no releases in the past 12 months. This is a meaningful maintenance warning despite the repository being present.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. That suggests current development has stalled, even though the repository is not archived.

Security policycaution

The repository has no published security policy. For a Laravel hosting-management application handling accounts and credentials, this is a real transparency and maintenance gap.