wangchengtao/demo

Lifecycle scriptscaution

The package runs four install and project-creation lifecycle scripts, increasing installation complexity and the amount of code executed automatically. This may be normal for a Laravel project template, but it still warrants more review than a package without install-time behavior.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance warning. The repository is not archived and was pushed recently, so this indicates possible slowing rather than abandonment by itself.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is established, while the missing scanning coverage modestly lowers assurance.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is not evidence of an active security problem.