exeque/laravel-monocle

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer installation, adding execution complexity for consumers. The signal provides no evidence that the script is unsafe, so this is a limited supply-chain caution.

Maintainerscaution

Only one account has registry publish access. That is a small publishing base, and the repository evidence also shows one active contributor, so there is limited demonstrated maintenance redundancy.

Project backingcaution

The registry namespace and repository are owned by the same individual account, not an organization. This matches the single-contributor evidence and provides no additional handoff capacity.

Release historycaution

The package is less than a day old, with nine releases in about 13 hours and a median interval of roughly 42 minutes. This shows active initial development but gives little evidence of sustained maintenance.

Repo bus factorcaution

One contributor made all 40 commits in the last three months, giving the project a complete single-contributor concentration. The repository owner is an individual, so no organizational backing compensates for this bus-factor risk.