a2workspace/laravel-database-patcher

Release historycaution

The package has made only two releases, both in July 2022, with no releases in the last four years. This is a meaningful maintenance concern for a dependency, although the package's narrow scope may reduce change frequency.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the repository's last push being in September 2022. This materially raises abandonment and support risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling is present. For a small package this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a minor reproducibility concern.