glue-systems/laravel-sp-api

Maintainerscaution

Only one registry publisher account is listed. That is a mild resilience concern, though the account is an organization-named development team and the repository provides corresponding project backing.

Project backingcaution

The repository is owned by the glue-systems user account rather than an organization account. This does not establish strong organizational backing, but the repository owner and package naming are consistent with the package.

Repo commit activitycaution

No commits and no active maintainers were recorded during the last 3 months, which is a meaningful maintenance warning. This is partly offset by the recent repository push, releases, and two merged pull requests, so it indicates caution rather than severe abandonment.

Repo popularitycaution

The repository has only 3 stars, 0 forks, and 3 watchers. Low adoption does not make the package unsafe by itself, but it provides little independent evidence of maturity or community support.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a security-process gap, not evidence that the release is malicious.