byrcsc/laravel-customer-health

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script, which adds execution during installation and warrants some review, but this signal alone is not evidence of an unsafe package.

Release historycaution

This is a very new package, released only once 41 days ago, so there is little release history to establish long-term maintenance reliability.

Repo bus factorcaution

All 18 recent commits came from one contributor, creating a meaningful continuity risk; organization backing partly compensates because maintenance can potentially be handed off.

Workflow auditcaution

All five workflows were analyzed with no audit findings, and four use read-only permissions. However, all 12 action references are unpinned and one pull_request_target workflow has top-level write access, creating build-integrity and permission-hygiene concerns.