paulo-hortelan/lara-cep

Lifecycle scriptscaution

The package defines a post-autoload-dump install-time script. This may be normal Composer integration, but it adds execution during installation and modestly increases dependency risk.

Maintainerscaution

Only one registry account has publish access. Because the project is user-owned rather than organization-backed, this indicates a thin publishing base, although it does not by itself prove abandonment.

Release historycaution

This is a young package, about 137 days old, with only two releases and both published within the same day. That is limited evidence of sustained maintenance, though the package is still early in its lifecycle.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. For a package this young, that is a meaningful sign that maintenance may have slowed.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting and handling vulnerabilities, though it is not severe enough to make the release unfit on its own.