diviky/laravel-security

Dependency profilecaution

Ten runtime dependencies create a moderately broad dependency surface for a security-focused Laravel package, increasing maintenance exposure without making the release unfit by itself.

Release historycaution

The package has existed for about 5 years 10 months with 31 releases, but only one release was published in the last 12 months; the latest release is recent, so this is a mild maintenance concern rather than abandonment.

Repo bus factorcaution

All 3 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second recently active contributor is shown, leaving a real concentration risk.

Repo issue activitycaution

There are no open issues and one open pull request, but no issues or pull requests were closed in the last month; this offers limited evidence of responsive community maintenance.

Repo popularitycaution

The repository has only 2 stars and 2 forks, providing little community validation; popularity is supporting evidence, so this is only a modest caution.