weirdo/entrust

Dependency profilecaution

The package declares nine runtime dependencies, largely matching Laravel components, plus one project helper. This is a meaningful integration surface but not unusually broad for a Laravel authorization package.

Release historycaution

The package has only three releases and none in the last 12 months; its latest release was about two years ago. This materially raises abandonment risk, despite the regular earlier release interval.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long release gap. This is the strongest maintenance concern in the assessment.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad support community.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling is present. The missing scanner is a hygiene gap, not evidence that the release is unsafe by itself.