jobmetric/laravel-post

Dependency profilecaution

The package declares 9 runtime dependencies, including Laravel and several JobMetric components. This is a meaningful dependency surface to maintain, though it is consistent with a framework-integrated package.

Release historycaution

The package is only 4 days old, despite 7 releases in that period and a median interval of about 12 hours. This shows active initial development but provides little long-term maintenance history.

Repo bus factorcaution

All 11 recent commits came from one contributor, leaving a thin operational bus factor. Organization ownership partly compensates by allowing maintenance to be handed off, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This leaves a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so reporting and handling of vulnerabilities is not documented.