holacliente/laravel-ubigeo

Release historydanger

The package released 21 versions in a short burst, but its latest release was about 17 months ago and it has had no releases in the last 12 months. This is the strongest maintenance concern.

Lifecycle scriptscaution

A post-autoload-dump install script runs during Composer setup. This is common packaging behavior, but it adds install-time execution that should be understood before adoption.

Repo popularitycaution

The linked repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the stale release cadence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. For a small package this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. This weakens the project's documented response path for reported issues, though the package's small scope limits the impact.