felicianopj/laravel-cashier-inspector

Project backingcaution

The repository is user-owned rather than organization-owned, so the single-contributor concentration is not offset by visible organizational backing.

Release historycaution

This is a young package, 34 days old with three releases and a median interval of about 1.6 days. The rapid activity is encouraging but offers limited evidence of long-term maintenance.

Repo bus factorcaution

All 69 recent commits came from one contributor, leaving maintenance highly concentrated and creating meaningful continuity risk for a user-owned project.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a moderate transparency gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving no documented process for reporting and handling vulnerabilities in a package that observes billing and webhook data.