roundly-consulting/plausible-for-laravel

Lifecycle scriptscaution

A post-autoload-dump install-time script is present. This is worth noting because it runs during installation, though the signal does not show behavior that makes it a health risk by itself.

Release historycaution

This is the first release, published today, so there is no release history yet to demonstrate sustained maintenance or compatibility over time.

Repo bus factorcaution

All 16 commits in the last three months came from one contributor, creating a real continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Workflow auditcaution

All three workflows were analyzed with no audit findings or untrusted checkouts, but all 10 action references are unpinned. That weakens build reproducibility and supply-chain hygiene without indicating an immediate severe risk.