farbcode/laravel-evm

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This adds execution during installation, but the signal does not show that the script is harmful or unusually broad.

Release historycaution

There have been six releases in about 10 months, showing ongoing publication, but the median interval is about 7 hours, which suggests a recent burst rather than a long-established cadence.

Repo bus factorcaution

All 28 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown to share current maintenance.

Repo issue activitycaution

Four pull requests are open and none were merged in the last month, which leaves some maintenance work unresolved despite the absence of open issues.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package that handles blockchain transactions and signing.