metafroliclabs/laravel-kit

Lifecycle scriptscaution

Four install and update lifecycle scripts run during Composer operations, increasing installation complexity and the amount of package code executed automatically. This is a meaningful supply-chain hygiene concern for a project template.

Release historycaution

The package has six releases over about 16 months, but none in the last 12 months, indicating that maintenance may have stopped. Its earlier roughly 18-day median release interval provides some evidence of prior activity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is strong evidence of currently limited maintenance activity.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this modestly reduces confidence in project maturity rather than determining the verdict.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a transparency and maintenance gap, not proof of an unsafe release.