whilesmart/eloquent-roles

Lifecycle scriptscaution

The package uses a post-autoload-dump install-time script. This is a point requiring review because lifecycle scripts execute during installation, although the signal does not show that the script is malicious or unusually broad.

Release historycaution

The package is about 349 days old but has only two releases, with roughly 155 days between them. This is limited maturity evidence, though the latest release is recent and the repository remains active.

Repo issue activitycaution

There is only one open issue and no recent issue or pull-request activity. This provides little evidence of community review, but it does not by itself show abandonment.

Repo popularitycaution

The repository has only two stars and two forks, so external adoption and review are limited. This is supporting evidence rather than a major concern for a small, otherwise documented package.

Repo toolingcaution

The project uses Make and Composer build tooling, but no security scanning tools were detected. The missing automated security checks reduce transparency somewhat.