gridwb/laravel-mem0

Lifecycle scriptscaution

A post-autoload-dump install script is present. This is a modest supply-chain and installation-complexity consideration, but the signal does not show that the script is unsafe.

Maintainerscaution

Only one account has registry publishing access. The repository is user-owned rather than organization-owned, so there is limited visible publishing redundancy.

Release historycaution

The package has 9 releases over about 13 months, but only 2 releases in the last year and the latest was about ten months ago, indicating a slowing release cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which is meaningful evidence of stalled maintenance for an API integration package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency and hygiene gap, not evidence that the package is unsafe.