hwkdo/intranet-app-raumverwaltung

Dependency profilecaution

The package declares 12 runtime dependencies, including framework, UI, permissions, export, and internal package components. This is a meaningful dependency surface that adds maintenance exposure but is consistent with the package's Laravel application scope.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This is a modest supply-chain and installation transparency concern, although no additional dangerous behavior is shown here.

Maintainerscaution

Only one registry account, hwkdo, has publish access. The matching repository ownership and frequent releases provide some compensation, but publishing remains dependent on a single account.

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This supports package identity while offering limited organizational maintenance redundancy.

Repo bus factorcaution

One contributor made all commits in the last 3 months, giving the project a complete short-term contributor concentration and increasing continuity risk.