develate/laravel-develate-web

Lifecycle scriptscaution

The package runs four Composer lifecycle scripts, including post-create and post-update hooks; these are common for Laravel applications but add install-time execution that should be reviewed.

Release historycaution

The package is only 119 days old and has just two releases, both within the first few days, so its maintenance track record remains limited.

Repo commit activitycaution

Two commits from two active maintainers in the last three months show some current maintenance, though the volume is still low for a project with a short history.

Security policycaution

No security policy was found in the repository, reducing transparency about how vulnerabilities should be reported.

Workflow auditcaution

All five workflows were analyzed, all six action references are pinned, and no audit findings or untrusted checkout sinks were reported. However, three workflows grant top-level write permissions, which is broader than necessary.