supplycart/laravel-eventsauce

Release historycaution

The package has existed since August 2019 with 11 releases, but only one release was published in the last 12 months. This indicates a mature package with a relatively slow recent cadence.

Repo bus factorcaution

All three-month commit activity came from one contributor, creating a high concentration risk. The organization-owned repository provides some handoff capacity, but no second contributor was active during the period.

Repo commit activitycaution

Only one commit was recorded in the last three months and only one maintainer was active. The recent release and merged pull request provide some evidence of upkeep, but ongoing maintenance capacity appears thin.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little public adoption evidence to support maturity. Popularity is supporting evidence rather than a requirement, and the project still has tests and recent release activity.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected. This is a transparency and assurance gap, though it is not by itself evidence of unsafe code.