lenorix/laravel-job-status

Lifecycle scriptscaution

The package uses a post-autoload-dump install-time script. Composer lifecycle scripts can execute code during installation, so this adds supply-chain exposure even though the signal does not show malicious behavior.

Release historycaution

The package has had no releases in the last 12 months, despite only eight releases since April 2025. That indicates limited recent maintenance, although the project is still relatively young.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The repository is not archived and was pushed more recently, but the current inactivity weakens evidence of ongoing maintenance.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide little independent evidence of broad community support.

Security policycaution

The repository has no security policy. For a package that integrates with Laravel applications, this is a transparency gap, though it is not evidence that the release is unsafe.