galloping-vijay/laravel-wjfcms

Release historydanger

The package has only one release, published nearly six years ago, with no releases in the last 12 months. That is a substantial maintenance and compatibility concern despite the linked repository remaining available.

Licensecaution

The manifest declares MIT and the artifact contains license files, but the detected BSD-3-Clause license does not match the declaration. The release is licensed, but the mismatch reduces licensing transparency.

Lifecycle scriptscaution

The package runs post-autoload-dump, post-create-project-cmd, and post-root-package-install scripts. Install-time execution increases dependency on review of package behavior, even though such hooks are common in Laravel projects.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Combined with the single old registry release, this points to weak current maintenance.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is not evidence that the package is unsafe by itself.