lucacri/laravelsimplesitemap

Lifecycle scriptscaution

The package declares a post-autoload-dump lifecycle script. Install-time scripts deserve some supply-chain scrutiny, but this signal gives no evidence that the script is unsafe, so it is only a limited concern.

Maintainerscaution

Only one registry account has publish access, which limits the apparent publishing bus factor. The linked repository is also owned by that individual, so there is no organizational backing shown to compensate for the narrow maintainer base.

Release historycaution

The package has four releases since October 2022, but none in the last 12 months and the latest release was in April 2024. This indicates a prolonged pause in maintenance for a package with a relatively short release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no visible development since April 2024. This is the strongest abandonment concern in the available evidence.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is not required for a small package, but these counters provide little supporting evidence of active community use or review.