avto-dev/events-log-laravel
avto-dev/events-log-laravel is a Laravel package that records application and model events in the database, providing a lightweight audit trail for tracking changes, user actions, and important activity across your application.
Architecture fit. The package remains a conventional Laravel-first library: it tracks the framework's own release cadence rather than pinning to an independent lifecycle. That is the desirable shape for a dependency we would consume inside an application, because its constraints move in lockstep with the framework and we inherit Laravel's own support-window discipline instead of managing a second one. The move to Laravel 13.x support signals the package is actively tracking upstream and is unlikely to be the component that blocks a future framework upgrade.
Integration feasibility. The material change is the floor bump: illuminate/* constraints now resolve to ^11.0, dropping Laravel 10. This is a hard installability boundary, not a runtime deprecation — Composer will simply refuse to resolve v3.7.0 in a Laravel 10 application and will fall back to the newest compatible 3.x. That is a safe failure mode but it means "upgrade the package" and "upgrade Laravel" are now the same work item for any service still on 10. The Laravel 13.x addition is forward-looking and only matters if we intend to adopt 13.x; it costs nothing if we don't.
Technical risk. Low to moderate, and concentrated in one place. The Docker-side changes (Composer 2.10.0, PHP 8.5, dev dependencies) affect the package's own CI image and are invisible to consumers unless we fork or extend that container for contract testing. The real risk surface is whether the package's internals were touched to accommodate Laravel 11–13's streamlined application skeleton — the removal of app/Http/Kernel.php and app/Console/Kernel.php, and the shift of middleware and schedule registration into bootstrap/app.php, are exactly the kind of change that breaks packages hooking the HTTP or console kernel. The release notes show no such changes, which is mildly reassuring but not proof. A semver-minor bump that removes framework support is technically a breaking change for the affected cohort; treat the version number as advisory.
Key questions.
php constraint or that our runtime image (8.2/8.3) is still inside it.Stack fit. The package is a natural fit for a Laravel monolith or a Laravel-based service; it assumes nothing exotic. The relevant fit question is not architectural but calendrical: our framework version must be ≥ 11 for v3.7.0 to install at all.
Compatibility matrix. Populate this before committing to anything:
| Our Laravel | Our PHP | Highest package version | Action |
|---|---|---|---|
| 10.x | 8.1–8.3 | latest 3.6.x | Hold; no action from this release |
| 11.x | 8.2+ | 3.7.0 | Adopt after staging verification |
| 12.x | 8.2+ | 3.7.0 | Adopt after staging verification |
| 13.x | 8.3+ (verify) | 3.7.0 | Only if 13 is GA and we are adopting it |
Migration path. The upgrade itself is a composer update — there is no config change, no data migration, no API rename advertised. The cost sits entirely in the prerequisite Laravel 10→11 jump where applicable, which is a framework migration project in its own right and should be scoped and scheduled as such, not smuggled in under a patch-level dependency bump.
Sequencing. Inventory composer.json and composer.lock across all affected repositories and record the framework version of each. Run composer why-not vendor/package 3.7.0 to surface the actual blocking constraint per repo — this distinguishes "we're on Laravel 10" from "something else is holding illuminate/support down." Classify repos into hold (Laravel 10) and proceed (11+). For the proceed cohort, resolve in a branch, run the full test suite plus any package-specific integration points (middleware, scheduled tasks, queued jobs), and deploy to staging before production. Adopt on the proceed cohort first; do not block it on the Laravel 10 remediation.
Compatibility verification. Because the release notes are silent on internal changes, the cheapest high-value check is a contract test exercising the package's kernel-level integration points on our actual framework version. If the package ships its own test suite, running it against our Laravel version is a fast substitute.
Maintenance. Positive. Aligning to ^11.0 and adding 13.x support shortens our exposure to an abandoned package and mirrors Laravel's own support policy, which we already track. The corollary is that our framework-support window is now inherited, not negotiated: when Laravel drops a version, the package will too, on roughly the same schedule. Plan framework upgrades against that cadence rather than treating package pinning as a buffer.
Support. No observable change in maintainer activity — the release shows ongoing CI maintenance (Composer, PHP, dev deps), which is a reasonable health signal. We have no SLA or vendor relationship implied by the notes; treat this as community-supported and budget accordingly.
Scaling. No scaling implications. This is a dependency constraint change, not a runtime behavior change.
Failure modes.
php constraint will follow. Not an issue today; worth a note to re-check at each minor.Ramp-up. Minimal. For teams on Laravel 11+, this is a version bump with no new concepts, no new config surface, and no retraining. For teams on Laravel 10, the ramp-up is the framework migration itself, which is already a known quantity internally and should be resourced from that budget — this package is a trigger for that work, not additional work on top of it.
Recommendation. Adopt on Laravel 11/12 applications after a staging pass and a kernel-integration check. Hold on Laravel 10 applications with no action required, pinning to the latest 3.6.x; revisit when the framework upgrade is scheduled. Defer Laravel 13.x adoption until GA, regardless of the package's stated support.
How can I help you explore Laravel packages today?