usamamuneerchaudhary/laravel-slipway

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This is a supply-chain and installation-behavior consideration, although the signal does not show that the script is malicious.

Maintainerscaution

Only one registry maintainer is listed, so continuity depends heavily on a single person; the linked repository is also owned by an individual rather than an organization.

Project backingcaution

The repository and registry are owned by the same individual account, which supports identity consistency but does not provide organizational continuity.

Release historycaution

The package is only 0 days old, with four releases all published within roughly 2 hours; this shows active initial publishing but provides no sustained maintenance track record.

Repo commit activitycaution

There were zero commits and zero active maintainers in the preceding 3 months, but the package is 0 days old, so this is primarily a lack of history rather than evidence of a recent collapse.