rvzug/laravel-possible-composite-key

Release historydanger

Only two releases were published, with the latest in October 2017 and none in the last 12 months. That long gap is a substantial abandonment concern for a framework integration package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since October 2017.

Repo popularitycaution

The repository has one star, zero forks, and one watcher, providing little community evidence to offset the lack of recent maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. For this small, old package that is a minor transparency gap rather than the main adoption concern.

Security policycaution

The repository has no security policy. This modestly reduces transparency for reporting vulnerabilities, though the package's much older activity is the stronger concern.