irabbi360/laravel-attribute-mask

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during Composer installation, adding execution during setup. No more severe script behavior is shown, so this is a limited supply-chain concern.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-maintainer concentration provides no visible organizational handoff capacity.

Release historycaution

The package is young at 243 days and has only two releases, with a median interval of about 164 days; this provides limited evidence of long-term maintenance.

Repo bus factorcaution

One contributor made all recent commits, giving the project a single-person maintenance dependency. The matching repository and release activity help verify ownership but do not broaden that base.

Repo commit activitycaution

Only one commit was recorded in the last three months. Recent activity exists, but the volume is too low to demonstrate strong ongoing maintenance capacity.