mkeremcansev/laravel-commission

Release historydanger

The package has five releases, but none were published in the last 12 months and the latest release is about 23 months after the first release period, indicating prolonged inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with a project that is currently unattended.

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during installation. This is a modest supply-chain consideration, but the signal alone does not show harmful behavior.

Maintainerscaution

One registry maintainer is consistent with an individually owned project, and the repository is also owned by the same person; this still leaves a thin maintainer base.

Project backingcaution

The package and repository are owned by the same individual, confirming clear ownership but not providing organizational backing to compensate for the thin maintainer base.