spits-online/laravel-options

Lifecycle scriptscaution

The package declares a post-autoload-dump install-time script. This is a supply-chain and installation-behavior consideration, but the provided signal does not show that the script is unsafe.

Release historycaution

This is the package's first release, published today, so there is no release history or established cadence to demonstrate maturity. That is a meaningful but early-stage concern rather than evidence of abandonment.

Repo commit activitycaution

The repository has no commits and no active maintainers in the last three months; because the project was created today, this is not proof of a collapse, but sustained maintenance is still unproven.

Workflow auditcaution

All 9 of 9 action references are unpinned, weakening build reproducibility. The audit found no high- or medium-severity issues, and the pull_request_target workflow has no untrusted checkout or script-injection sink; top-level write permissions in two workflows remain a mild hygiene concern.