ketapay/ketapay-laravel

Lifecycle scriptscaution

A post-install command runs during installation, which adds execution during dependency setup and deserves some caution even though no harmful behavior is shown here.

Release historycaution

This is the package's first release, published today, so there is no demonstrated release track record yet.

Repo commit activitycaution

The repository records zero commits and zero active maintainers in the last three months, but the package is only hours old, so this mainly reflects limited history rather than established abandonment.

Version stabilitycaution

The only recent release is the prerelease v0.1.0-beta.1, and all recent releases are prereleases, indicating an API that may still change.

Workflow auditcaution

All three workflows were analyzed with no audit findings or untrusted checkout and script-injection sinks. However, all 10 action references are unpinned and one workflow grants top-level write permissions, creating a workflow-reproducibility and token-scope caution.