henriquex25/laravel-auditor

Release historydanger

The package made six releases in a short burst, then had no release in about 2 years and 5 months. That long gap is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months, consistent with the registry's long release gap and materially increasing maintenance risk.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script, adding execution during installation and requiring more trust than a package with no lifecycle hooks.

Package scaffoldingcaution

Tests are present in both the package and repository, and this exact version has a GitHub release; the missing changelog is normal for a published artifact, while the missing README weakens consumer documentation for a Laravel library.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.