dmdboi/laravel-autoscopes

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer installation. This is an additional supply-chain execution surface, although the signal does not show that the script is malicious or unusually dangerous.

Maintainerscaution

Only one registry account has publishing access. Because the repository is user-owned rather than organization-backed, this represents a thin publishing base and increases continuity risk if that maintainer becomes inactive.

Release historycaution

The package is only 195 days old and has two releases, both published within about four hours, so there is limited evidence of sustained maintenance over time.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. For a package only 195 days old, that weakens confidence in ongoing maintenance and is the main adoption concern.

Repo issue activitycaution

There are no open issues or pull requests and no activity in the last month. This is not inherently negative for a small new package, but it provides little evidence of an active user or contributor community.