liberusoftware/ecommerce-laravel

Dependency profilecaution

The release declares 22 runtime dependencies spanning Laravel, Filament, payment, realtime, and other integrations, creating a broad maintenance and update surface for adopters.

Lifecycle scriptscaution

Four install and update lifecycle scripts run during Composer operations, increasing installation complexity and the code executed by consumers. This is common for a Laravel application but remains a supply-chain hygiene consideration.

Release historycaution

The package is only 64 days old and all four releases arrived within roughly 37 minutes, so there is limited evidence of sustained release maturity despite recent activity.

Workflow auditcaution

All six workflows were analyzed successfully, but all 29 action references are unpinned, and high-confidence template-injection findings appear in composer-require.yml and lint.yml. No untrusted checkout or script-injection trigger was found, so this is workflow hygiene risk rather than a severe standalone finding.