larswiegers/laravel-ai-evaluation

Lifecycle scriptscaution

The package runs a post-autoload-dump install lifecycle script. This is a supply-chain review consideration, but the signal does not show that the script is harmful or unusually broad.

Maintainerscaution

One registry maintainer creates a narrow publishing base and increases continuity risk if that person becomes unavailable. The individual-owned repository makes a single registry maintainer less surprising, but does not remove the bus-factor concern.

Project backingcaution

The registry namespace and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing to broaden maintenance capacity.

Repo commit activitycaution

No commits and no active maintainers were recorded over the last three months, which is a meaningful maintenance concern. The recent push and release history provide some counterevidence, but the observed commit window still weakens confidence in sustained development.

Repo popularitycaution

Six stars and no forks show limited adoption, so there is little external visibility or community redundancy. This is supporting caution rather than evidence that the package is unsafe to use.