stitch-digital/laravel-simpro-api

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This adds a small dependency-installation review concern, although the signal does not show that the script performs unsafe work.

Release historycaution

The package has 35 releases, but none in the last 12 months and the latest registry release was about 17 months ago. Repository activity provides some compensation, but the registry release gap still raises maintenance concern.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, though the January 2026 push shows the repository was active more recently.

Repo issue activitycaution

There is one open issue and five open pull requests, with no issues or pull requests merged in the last month. The backlog suggests limited recent responsiveness.

Security policycaution

The repository has no security policy file. For an API integration library, this is a transparency gap, although licensing, tests, and dependency scanning provide some compensating project structure.