concept7/laravel-kite

Lifecycle scriptscaution

The package uses a post-autoload-dump install-time lifecycle script. This is a genuine execution-surface concern for dependency consumers, although the signal does not show that the script is malicious or unusually dangerous.

Repo bus factorcaution

One contributor made all 14 commits in the last three months, creating a concentrated maintainer dependency. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little popularity-based external validation. Popularity is supporting evidence only, and the strong release and commit signals compensate for this gap.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning is a hygiene gap, though it does not outweigh the package's active maintenance and testing evidence.

Security policycaution

The repository has no security policy. This reduces vulnerability-reporting transparency, but it is a moderate hygiene gap rather than an abandonment indicator.