roundly-consulting/kubernetes-api-for-laravel

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This is a supply-chain and installation-surface concern because its behavior executes during dependency setup, although no malicious conclusion follows from the script name alone.

Release historycaution

This is the first and only release, published 0 days ago, so there is no demonstrated release track record or long-term maintenance history yet.

Repo bus factorcaution

All 17 recent commits came from one contributor, so maintenance knowledge is concentrated. Organization backing provides some handoff capacity, but no second active contributor is shown.

Workflow auditcaution

All three workflows were analyzed successfully with no untrusted checkouts, injection findings, or high-confidence audit issues. However, all six referenced actions are unpinned, leaving builds exposed to moving action versions.