silah/easy-lara-roles

Lifecycle scriptscaution

The package declares post-install and post-update Composer scripts, so installation and updates execute package-provided commands. This adds supply-chain exposure even though no malicious behavior is established here.

Package scaffoldingcaution

The release has GitHub release notes, but the README contains no usable content and neither the package nor repository reports tests or a changelog. Missing tests and changelog are normal for published artifacts, while the empty README weakens consumer transparency.

Release historycaution

This is the only release, published more than two years ago, with no releases in the last 12 months. That limited history leaves little evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, following its last push in January 2024. This is a substantial abandonment concern for a Laravel library.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. That is a modest transparency and maintenance gap rather than evidence of compromise.