spatie/nova-tags-field

Lifecycle scriptscaution

The package uses a post-autoload-dump install-time script. This adds execution during installation, but the signal provides no evidence that the script is unsafe or unusually broad.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. That is a meaningful sign of currently limited maintenance, partly offset by the recent registry release and repository push evidence.

Repo issue activitycaution

No new or closed issues or pull requests were recorded in the last month, and there were no new or merged pull requests. This shows little recent collaboration, although open issue count is unknown.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no SECURITY.md or other detected security policy. That reduces transparency for reporting vulnerabilities, but it does not by itself show the release is unsafe.