mzaman/laravel-matomo-tracker

Lifecycle scriptscaution

A post-install-cmd script runs during installation, adding execution during dependency setup; without evidence that it is necessary or narrowly scoped, this is a modest transparency and supply-chain concern.

Release historycaution

The package is about 13 months old but has had no releases in the last 12 months; its four releases were concentrated on the initial release day, which weakens evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is consistent with the lack of recent releases and raises abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest repository hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting and handling vulnerabilities.