craftcms/laravel-dependency-aware-cache

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer setup, adding execution-time complexity and a modest dependency-installation risk.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance warning, although the package had a release during the observed period.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a hygiene gap rather than evidence that the package is unsafe to depend on.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts, injection findings, or auditor errors. However, all 8 action references are unpinned and one workflow has top-level write permissions, creating a moderate build-hygiene concern without an untrusted trigger or sink.