patchlevel/laravel-event-sourcing

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script, which adds a modest execution concern even though only one standard Composer lifecycle hook is present.

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, which is modest activity, though the repository was recently updated and the release history remains active.

Repo toolingcaution

The project uses Composer and Make, but no security scanning tools were detected, leaving a maintenance and security-process gap.

Security policycaution

The repository has no SECURITY.md or other detected security policy, reducing transparency for reporting and handling vulnerabilities.