secursus/laravel-firewall

Dependency profilecaution

Six runtime dependencies, including Laravel, Guzzle, and notification and detection libraries, create a meaningful dependency surface that increases upgrade and compatibility obligations, but the profile is not excessive for a Laravel firewall package.

Maintainerscaution

Only one registry account has publish access. The repository is user-owned rather than organization-owned, so there is no provided project-backing evidence to offset this concentration.

Project backingcaution

The registry namespace and repository owner match, but the owner is a user account rather than an organization, so there is no organizational maintenance capacity to offset the single-maintainer risk.

Repo bus factorcaution

All three-month commit activity comes from a single contributor, creating a meaningful continuity risk if that person becomes unavailable; no organization backing is provided to compensate.

Repo commit activitycaution

The repository recorded only one commit in the last three months from one active maintainer. Recent release activity is reassuring, but the low commit volume limits evidence of sustained maintenance.