keapgeek/laravel-keap

Lifecycle scriptscaution

A post-autoload-dump script runs during installation. This is a mild supply-chain consideration, although the package also uses standard Composer and Laravel package tooling.

Maintainerscaution

Only one registry account has publish access, but the repository is owned by an organization, which provides some backing for a small registry maintainer list.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful recent-maintenance gap despite the newer release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens automated security hygiene without making the package unfit to use.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.