sharpapi/laravel-content-detect-urls

Lifecycle scriptscaution

The package uses a post-autoload-dump install lifecycle script, adding execution during installation; the signal provides no evidence that the script is harmful, so this is a limited supply-chain caution.

Maintainerscaution

Only one registry account has publishing access, which creates some operational concentration risk; the organization-backed repository and active release history partly compensate.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which is a maintenance concern, although the regular release history and current push provide compensating evidence.

Repo toolingcaution

Composer build tooling is present, but no repository security scanning tools were detected, leaving a modest assurance gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent for adopters.