larastash/vue

Lifecycle scriptscaution

The package uses Composer lifecycle scripts for project creation and updates, which is expected for a Laravel application skeleton but increases install-time behavior.

Repo bus factorcaution

All 14 recent commits came from one contributor, leaving maintenance and review capacity concentrated in a single person.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the concentrated maintenance base.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving automated security coverage unconfirmed.

Security policycaution

The repository has no security policy, so its process for receiving and coordinating vulnerability reports is not documented.