kokonut-ch/laravel-swiss-bank-csv-parser

Licensecaution

The package declares MIT and includes license files, but the artifact also identifies Apache-2.0, leaving a license coverage mismatch that should be clarified.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. The signal provides no script details, so this is a limited supply-chain hygiene concern rather than evidence of harmful behavior.

Release historycaution

The package is only 60 days old but has four releases, including recent activity, which shows an active launch phase without yet demonstrating long-term maintenance.

Repo bus factorcaution

One contributor holds all six recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown, so the concentration remains a maintenance risk.

Repo commit activitycaution

Six commits in the last three months show recent work, but all activity comes from one active maintainer, limiting evidence of durable maintenance capacity.