dyanakiev/laravel-beanstalkd-ui

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. Install-time execution adds supply-chain and deployment risk, even though no dangerous behavior is shown by this signal alone.

Project backingcaution

The registry namespace and repository are owned by the same individual, providing consistent ownership evidence. Individual ownership is not inherently unhealthy, but it offers less organizational continuity than project backing by a team.

Release historycaution

The package has 25 releases over roughly 10 years, but none in the last three years and the latest release was in April 2023. The non-archived repository is a limited compensating signal, but maintenance appears to have stopped.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The absence of automated security coverage is a meaningful hygiene gap for a dependency.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear, adding transparency risk alongside the inactive release history.