chara/laravel-widget

Licensecaution

The manifest declares a proprietary license, with no detected license text or license file. This creates a material licensing concern for developers expecting an open-source dependency.

Release historycaution

This is the package's first release, published 0 days ago, so there is no release track record or demonstrated maintenance cadence yet. The repository's recent push partly offsets this, but does not establish longevity.

Repo commit activitycaution

The repository has 0 commits and 0 active maintainers in the last 3 months, but the package itself is only 0 days old. This is limited maintenance evidence rather than proof of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That leaves a modest transparency and assurance gap for a package intended to handle authenticated admin-panel integration.

Security policycaution

The repository has no security policy. For an integration that handles project and shared keys, this reduces the project's stated process for receiving and handling security reports.