jcergolj/brevo-webhook-manager-for-laravel

Lifecycle scriptscaution

The package runs a post-autoload-dump script during installation. This deserves awareness because install-time code executes in the consumer environment, though this signal alone does not show harmful behavior.

Repo bus factorcaution

All recent commits came from one contributor, giving the project a single-person bus factor. The matching repository and package ownership provide continuity context, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded one commit in the last three months from one active maintainer. Recent activity is present, but the low volume limits evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a package handling Brevo API credentials and webhook authentication, this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and disclosure expectations less clear for a package that processes API integrations and incoming webhooks.