marceloeatworld/plunk-laravel

Project backingcaution

The repository is owned by a User account rather than an organization, so the single registry maintainer represents a genuinely narrow apparent ownership base. The matching repository and release notes provide some compensating transparency.

Release historycaution

The package is 531 days old with 3 releases, only 1 release in the last 12 months, and a median release interval of about 169 days. This indicates a slow maintenance cadence, although the latest release is recent enough to show the project is not abandoned.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. That inactivity is a meaningful maintenance concern for a package integrating with an external email API.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This reduces transparency around vulnerability reporting and response expectations, though it is a moderate documentation gap rather than a standalone adoption blocker.