roundly-consulting/likes-for-laravel

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. A lifecycle hook expands installation behavior and deserves review, but no harmful behavior is shown by this signal alone.

Release historycaution

This is the first release, published today, so there is no track record for release consistency or long-term maintenance. The repository is active and has 17 recent commits, which provides some early evidence of work but not maturity.

Repo bus factorcaution

All 17 recent commits came from one contributor, leaving maintenance dependent on a single active individual. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Workflow auditcaution

All three workflows were analyzed successfully with no untrusted checkouts, script injections, or high-confidence audit findings. However, all nine action references are unpinned, so workflow dependencies can drift and are less reproducible.