groupesti/laravel-license

Release historycaution

The package is only 53 days old and all three releases occurred within a very short period, leaving limited evidence of long-term maintenance and release stability.

Repo bus factorcaution

Commit activity is evenly split between two contributors, reducing single-person concentration; the small contributor base still limits resilience if either stops contributing.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving a transparency and maintenance gap for a package that handles signed license tokens.

Security policycaution

The repository has no security policy, so users are given no documented process for reporting or handling vulnerabilities in a package that exposes authentication-related licensing features.

Token permissionscaution

The repository workflow lacks top-level GitHub Actions permissions, so its token scope is not explicitly constrained; this is a workflow-hardening gap, though no write permissions were observed.