roundly-consulting/campaigns-for-laravel

Lifecycle scriptscaution

The package declares a post-autoload-dump install lifecycle script. Composer lifecycle scripts are common, but they execute during installation and add a small amount of install-time complexity.

Release historycaution

This is the package's first and only release, published 0 days ago, so there is no release history or demonstrated maintenance cadence yet.

Repo bus factorcaution

One contributor made all 16 commits in the last 3 months, creating a high concentration risk. Organization backing provides some handoff capacity, but no second active contributor is shown.

Workflow auditcaution

All three workflows were analyzed successfully with no untrusted checkouts, script injection, high-severity findings, or broad top-level write permissions. However, all 9 action references are unpinned, leaving workflow behavior dependent on mutable action versions.