gridwb/laravel-adapty

Lifecycle scriptscaution

The package uses a post-autoload-dump install-time script. This adds execution surface during installation and warrants review, although the signal does not show a dangerous script by itself.

Package scaffoldingcaution

The artifact has a substantial README and changelog, and the repository uses GitHub Releases, but neither the artifact nor repository contains tests. Documentation and release tooling compensate for some transparency needs, while the absence of tests remains a maintenance gap.

Project backingcaution

The repository is owned by the individual account gridwb, with no organization backing shown. This is consistent with the single-maintainer activity and leaves limited evidence of maintenance handoff capacity.

Repo bus factorcaution

One contributor performed 100% of the three-month commit activity. Because the repository owner is an individual rather than an organization, there is no project-backing evidence to offset this concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, from one active maintainer. Recent releases and a current push provide some compensating evidence, but the low sustained commit activity is a genuine maintenance concern.