abiturma/laravel-fints

Release historycaution

The package has had no releases in the last 12 months, and its latest release was about 13 months ago. Its 10 releases since 2019 show an established project, but not current momentum.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating no recent maintenance activity. The repository is not archived and was pushed with the assessed release, which partly offsets but does not remove the concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This matters for a package that handles bank-account connectivity, although it does not by itself indicate abandonment.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but both of its 2 action references are unpinned. That leaves avoidable build-integrity risk while the rest of the workflow audit is clean.