send4store/on-hand

Release historydanger

The package has had only two releases, with none in roughly eight years; its release history provides strong evidence of abandonment risk.

Repo commit activitydanger

There were no commits or active maintainers in the last three months, consistent with no repository activity since January 2018 and materially increasing abandonment risk.

Dependency profilecaution

Two runtime dependencies, including Laravel and optimus/architect, are a modest declared dependency set. However, the older Laravel-era package context makes compatibility with current applications uncertain.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not evidence of maliciousness.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in a package with no recent maintenance.