rdp77/veyaz

Lifecycle scriptscaution

The package runs post-autoload-dump, post-create-project-cmd, and post-root-package-install scripts. These are relevant install-time behavior for a Laravel application template and warrant attention, though the signal alone does not establish unsafe behavior.

Release historycaution

The package has only 2 releases, both apparently ending on February 12, 2024, with no releases in the last 12 months. That long release gap is a real maintenance concern despite the stable version format.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers during the last 3 months, matching the lack of recent releases. The repository is not archived, but there is no observed recent activity to offset the abandonment risk.

Workflow auditcaution

All 8 of 9 analyzed action references are unpinned, and a high-confidence finding reports a container using the floating `latest` tag. No untrusted checkout or script-injection path was found, which limits but does not remove the workflow hygiene concern.