honortaker/laravel-holidays-de

Lifecycle scriptscaution

A post-autoload-dump install lifecycle script can execute package-controlled behavior during Composer installation. This is a supply-chain hygiene concern, though the signal does not show that the script is harmful.

Release historycaution

This is the package's only release, published 610 days ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain despite the repository remaining available.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported, reducing automated security visibility for a package that imports data from an external API.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.