nagi/laravel-newrelic-log-api

Lifecycle scriptscaution

A post-autoload-dump install-time script is present. Without evidence that it performs unsafe or surprising actions, this is a modest transparency consideration rather than a severe concern.

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned, so this is a genuine bus-factor concern rather than normal organization publishing hygiene.

Release historycaution

The package is about two years old with eight releases, but only one release in the last 12 months, indicating a modest and recently slower release cadence.

Repo commit activitycaution

The repository records zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent release push.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is less serious for a small package without other security findings.