roundly-consulting/appointments-for-laravel

Lifecycle scriptscaution

A post-autoload-dump install script adds execution during dependency installation, increasing the package's install-time behavior surface. No other evidence here shows that the script is unsafe, so this is a limited hygiene concern.

Release historycaution

This is the first release, published less than 1 hour ago, so there is no track record for maintenance or compatibility over time. The active repository provides some compensating evidence, but maturity remains unproven.

Repo bus factorcaution

One contributor made 100% of the 28 recent commits, creating a meaningful continuity risk. Organization ownership partly compensates because maintenance can potentially be handed off within the project.

Workflow auditcaution

All 3 workflows were analyzed successfully with no untrusted checkouts, script injection, or high-severity findings. However, all 8 action references are unpinned, so workflow behavior can change as upstream actions move.