novay/laravel-settings

Project backingcaution

The registry namespace and repository owner are both Novay, so ownership is at least consistent. The owner is an individual account rather than an organization, which offers limited backing evidence.

Release historycaution

All five releases arrived within roughly 45 minutes on one day, with no later releases across the package's 133-day lifetime. That short burst provides little evidence of sustained maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months. For a package only 133 days old, that is a meaningful sign that active maintenance may have stopped.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That makes the package-to-source relationship less clear and raises a caution about whether this repository is the intended project source.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. The missing scanning is a hygiene gap, not evidence that the package is unsafe to depend on.