phpsa/laravel-one-time-operations

Lifecycle scriptscaution

A post-autoload-dump script runs during Composer installation. This is a normal framework-package mechanism, but it gives installation behavior more execution surface than a package with no lifecycle scripts.

Maintainerscaution

The registry lists one publishing account. Because the repository is user-owned and no broader organization backing is shown, the publishing base is thin, though registry access alone does not prove weak maintenance.

Release historycaution

Only two releases were published, both within minutes on the same day, and there have been no releases in about 19 months. That makes ongoing maintenance uncertain for a package developers may depend on.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long release gap and raising abandonment concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. That is a transparency and hygiene gap rather than evidence that the release is unsafe.