byrcsc/laravel-payrex

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer operations. This is a meaningful execution-time consideration, although the signal does not show that the script is unsafe.

Release historycaution

The package is only 56 days old, with four releases concentrated over three days. This shows active initial development but provides little evidence of long-term maintenance.

Repo bus factorcaution

One contributor accounts for all eight recent commits. Organization backing provides some handoff potential, but no second active contributor is shown to share maintenance responsibility.

Repo commit activitycaution

The repository had eight commits in the last three months, all from one active maintainer. Recent activity is positive, but the narrow base limits evidence of durable maintenance capacity.

Workflow auditcaution

The audit covered all three workflows with no reported findings and no untrusted checkout or script-injection sinks. However, all nine action references are unpinned, and one workflow grants top-level write permissions, creating a moderate workflow hygiene concern.