usermp/laravel-permission

Release historydanger

The package has made no releases in the last 12 months, despite being about two years old and having only four releases overall. That weakens confidence that bugs and compatibility issues will be addressed.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was over one year ago. This is strong evidence of stalled maintenance.

Package scaffoldingcaution

The package has no README, tests, or changelog, although absent tests and changelogs are normal in published artifacts and a GitHub release exists for this version. The missing README still makes this library harder for consumers to integrate.

Repo popularitycaution

The repository has one star, zero forks, and one watcher, providing little evidence of external adoption or review. Popularity is supporting evidence, but this very small footprint increases dependency risk.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security scanning tools are present. The missing scanning process is a modest supply-chain hygiene gap, not evidence of maliciousness.