rifatxtra/laravel-featurekit

Lifecycle scriptscaution

The package defines four install- and update-time Composer scripts, including post-create-project-cmd and post-update-cmd. Such scripts are relevant supply-chain hygiene concerns because installation can execute project code, even though this signal alone does not show harmful behavior.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. For a package released within the past year, that is a meaningful maintenance warning despite the recent release history.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide little external validation for this young package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This leaves a transparency and maintenance gap for a package intended to be used in application projects.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and maintenance expectations less clear, though it is not evidence that the package is unsafe.