darkterminal/turso-http-laravel

Lifecycle scriptscaution

A post-autoload-dump lifecycle script is present. This is an additional install-time execution surface, though the signal does not show that it performs unsafe behavior.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so there is no shown organizational backing to offset the thin maintainer and release activity.

Release historycaution

This is the only registry release, published about two years ago, with no releases in the last 12 months. The repository was pushed more recently, but release activity remains thin and raises maintenance risk.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. The recent repository push offsets complete abandonment concerns somewhat, but it does not establish sustained development.

Security policycaution

The repository has no security policy. That weakens disclosure and maintenance transparency for a package handling database connectivity, with no provided evidence compensating for the gap.