paylinksa/laravel

Licensecaution

The artifact includes a license file, but it was detected as MIT-0 while the manifest declares MIT. That mismatch should be clarified before redistribution or commercial use.

Maintainerscaution

Only one registry account has publish access, leaving a thin publishing base. The repository is user-owned rather than organization-backed, so there is limited visible redundancy if that maintainer becomes unavailable.

Release historycaution

The package has 9 releases, but none in the last 12 months and the latest release was nearly two years ago. This is a meaningful maintenance concern despite the earlier regular release interval.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That reduces evidence of ongoing vulnerability monitoring, though it is not proof of an unsafe release.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities.