vinkas/cda-client-laravel-fortify

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This adds some installation complexity, but the signal does not show harmful behavior or an unusual script scope.

Release historycaution

The package has only two releases, both around November 25, 2024, and none in the last 12 months. This limited history and long inactivity reduce confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the last push being in November 2024. This is the strongest concern because security and compatibility fixes may not arrive.

Repo popularitycaution

The repository has no stars, forks, or watchers. This is weak supporting evidence rather than a verdict, and the package can still be healthy if maintained, but it provides no external adoption signal.

Security policycaution

The repository has no published security policy. That reduces transparency for reporting vulnerabilities, though it is not by itself evidence that the package is unsafe.