mortenscheel/laravel-query-recorder

Lifecycle scriptscaution

A post-create-project-cmd lifecycle script is present. Although this is not evidence of malicious behavior, install-time automation deserves review because it can execute publisher-controlled actions during project setup.

Maintainerscaution

Only one registry account has publish access. Because the project is individually owned, this is consistent with the backing shown, but it still creates a single-person continuity risk.

Project backingcaution

The registry namespace and repository owner match, and the project is owned by an individual rather than an organization. That is coherent, but it leaves a relatively narrow ownership base.

Release historycaution

The package has five releases over 553 days, including a release about 6 months ago, but only one release in the last 12 months indicates a modest pace.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which is the clearest maintenance concern despite the recent release and repository push.