fridzema/laravel-date-format-converter

Lifecycle scriptscaution

A post-autoload-dump install-time script is present. This is a modest supply-chain and installation-complexity concern, although no other provided signal indicates that the script is dangerous.

Release historycaution

The package has only 3 releases over about 2.5 years, with a median interval of about 12 months and just 1 release in the last 12 months. This indicates sparse maintenance for a dependency, though a recent release provides some evidence of continued ownership.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months. Combined with the roughly annual release cadence, this leaves limited evidence of active ongoing maintenance.

Repo toolingcaution

The project uses Composer, but no security-scanning tool was detected. This is a limited hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That reduces transparency around vulnerability reporting and response, especially for a package intended to be reused by other projects.