geowrgetudor/laravel-balance

Lifecycle scriptscaution

A post-autoload-dump install-time script is present, so Composer installation can execute package-defined behavior. The signal provides no evidence that the script is unsafe, but it adds operational exposure.

Project backingcaution

The package and repository are owned by the same individual account, so there is no organization backing shown. This is consistent with a small project but leaves a relatively thin apparent support base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent repository push and release history provide some contrary evidence, current development activity is thin.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is not evidence that the package is unsafe.

Version stabilitycaution

Version 0.2.6 is not a prerelease, but the package remains below 1.0, so its public API may still change more readily than a stable-major release.