sharpapi/laravel-hr-related-skills

Lifecycle scriptscaution

A post-autoload-dump install-time script is present. This is a mild transparency and installation-complexity concern, but the signal alone does not indicate unsafe behavior.

Maintainerscaution

Only one registry account has publishing access. The organization-owned repository provides some backing, but the registry publishing base remains narrow.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, despite a repository push today and recent releases; this creates uncertainty about ongoing development depth.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.