davingm/laravel-runtime

Licensecaution

The manifest declares AGPL-3.0-or-later, while the artifact license file was detected as GPL-3.0. The package is licensed, but the mismatch should be clarified before use.

Release historycaution

The package was first published less than 1 day ago and has only 3 releases, so there is little track record to establish maintenance reliability. The rapid initial releases show activity but do not yet compensate for the lack of history.

Repo commit activitycaution

The repository has 0 commits and 0 active maintainers in the last 3 months, but the package itself is less than 1 day old, so this is mainly insufficient history rather than evidence of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a package that installs runtime files and includes JavaScript tooling, this leaves a modest transparency gap.

Security policycaution

The repository has no security policy. This is a hygiene and disclosure gap, though the package's very recent creation limits how strongly it indicates poor maintenance.