grazulex/laravel-strongmigrations

Lifecycle scriptscaution

The package uses a post-autoload-dump install-time lifecycle script. This adds execution during installation, but the provided signal does not indicate dangerous behavior, so it is a limited supply-chain hygiene concern.

Project backingcaution

The registry namespace and repository owner match, but both identify a personal user account rather than an organization. This is consistent ownership evidence, though it suggests a narrower backing structure.

Release historycaution

The package is about six months old with three releases, including three in the last 12 months. This shows ongoing publishing, although the relatively small history limits maturity evidence.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the last three months, a meaningful maintenance warning. The current release, recent push, and four merged pull requests in the last month partly offset that concern.

Repo popularitycaution

The repository has one star, fork, and watcher. This is limited external adoption evidence, but popularity is only supporting evidence and does not outweigh the documented project structure and recent release activity.