roundly-consulting/metrics-for-laravel

Lifecycle scriptscaution

A post-autoload-dump install script adds some execution surface during installation, although this is a common Composer lifecycle hook and no dangerous behavior is shown here.

Release historycaution

This is a brand-new package with one release and no established release cadence, so long-term maintenance is not yet demonstrated.

Repo bus factorcaution

All 19 recent commits came from one contributor, creating continuity risk; organization backing provides some capacity for handoff but no second active contributor is observed.

Workflow auditcaution

All three workflows were analyzed without high-confidence findings or untrusted checkouts, but all 8 action references are unpinned, leaving unnecessary build-integrity risk.