blax-software/laravel-workkit

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This adds execution during installation and warrants care, although the signal provides no evidence that the script is unsafe.

Release historycaution

The package has only four releases and is about five months old, with releases concentrated near its initial publication and no release for nearly five months. That leaves limited evidence of sustained release maintenance.

Repo bus factorcaution

Two contributors each supplied half of the recent commits, avoiding single-contributor concentration. The small contributor count still limits the depth of the maintenance base.

Repo commit activitycaution

Only two commits were recorded in the last three months, which is sparse for an actively evolving package. Two active maintainers provide some compensation, but the recent maintenance record remains limited.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a transparency and maintenance-process gap, not evidence of a defect in the release.