duduandminghang/laravel-generator

Package file treedanger

The published artifact contains only composer.json and testhackg/aaa.php, while the repository also contains bin/tools.exe; this is unusually sparse and reduces transparency about what consumers receive.

Release historydanger

This is the only release, published about 15 months ago, with no releases in the last 12 months; that provides little evidence of sustained maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, which supports an abandonment concern alongside the single-release history.

Lifecycle scriptscaution

post-install-cmd and post-update-cmd run during dependency installation or updates, increasing the package's execution surface beyond ordinary library loading.

Package scaffoldingcaution

The artifact has no README, while tests and changelog absence are normal for published artifacts; the GitHub release is a small positive but has no release notes excerpt.