code4mk/lara-head

Release historydanger

This is the package's only release, published in January 2020, with no releases in the last six years. That strongly increases abandonment risk for a dependency.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling is present. This is a modest transparency and hygiene gap, not evidence that the package is unsafe.

Repository archivedcaution

The repository is not archived, but it was last pushed in January 2020, corroborating the stale release history and weakening evidence of active maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a minor transparency gap alongside the stronger maintenance concern.