netbums/laravel-subscription-preset

Release historydanger

There has been only one release, on July 9, 2022, with no releases in the last 12 months. That long period without published updates is a substantial maintenance and compatibility concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this indicates a meaningful abandonment risk.

Dangerous workflowscaution

One workflow uses pull_request_target for Dependabot auto-merge. Although no untrusted checkout or script injection was detected, this privileged workflow warrants review.

Lifecycle scriptscaution

The package uses a post-autoload-dump lifecycle script, which adds install-time behavior and deserves review before adoption. The signal does not by itself show that the behavior is unsafe.

Maintainerscaution

One registry publishing maintainer is consistent with a small user-owned project, but it leaves the package dependent on a very narrow maintenance base. No stronger organizational backing is present.