kaswell/laravel-boxapi

Release historydanger

This is the package's only release, published over five years ago, with no releases in the last 12 months. That strongly suggests the package is no longer actively maintained.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, and its last push was over four years ago. The matching repository and stable release do not compensate for this prolonged inactivity.

Lifecycle scriptscaution

The package declares a post-update-cmd lifecycle script. Such scripts can run during dependency updates and deserve extra scrutiny, although this signal alone does not establish harmful behavior.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security scanning tool was detected. This leaves an avoidable transparency and maintenance gap.