scrumble-nl/laravel-model-ts-type

Lifecycle scriptscaution

A post-autoload-dump script runs during Composer installation. This is a meaningful execution-time consideration, although the provided signals do not show that it is unusually risky.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent release provides some compensating evidence, but the current pause lowers maintenance confidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented for consumers.

Workflow auditcaution

The single workflow was fully analyzed with no detected sinks or audit findings, and it has no top-level write permissions. However, all four action references are unpinned, weakening build reproducibility and update safety.