insoutt/ec-validator-laravel

Lifecycle scriptscaution

The package runs a post-autoload-dump script during installation. This is a meaningful supply-chain surface, but the signal provides no evidence that the script is unsafe.

Project backingcaution

The package and repository are owned by the same individual account, giving clear ownership but no organizational backing or visible redundancy.

Release historycaution

The package is about 698 days old with only three releases and one release in the last 12 months, indicating a slow cadence. A recent release and repository push partly offset the concern.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent push shows the project has not vanished, but current maintenance capacity appears limited.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package used in application validation.