wangchengtao/laravel-tianque

Project backingcaution

The repository is owned by the same individual namespace as the package, so ownership is clear. Individual ownership is valid backing, but it provides less demonstrated maintenance capacity than an active organization-backed project.

Release historycaution

This package has only one release, published 234 days ago, so there is little evidence of an established release track. Its stable 1.0.0 version partly offsets the immaturity but does not demonstrate ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. For a package with only one release, this is a meaningful sign that maintenance may have stalled.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem. No security-scanning tool is configured, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, but it is not severe enough to make the release unfit on its own.