achyutn/laravel-news-sdk

Release historycaution

Five releases were published within the last 12 months, but they were concentrated within roughly two days in January 2026, followed by a long gap. The release burst shows initial activity but does not offset the recent inactivity.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, while the latest push was about eight months ago. This suggests maintenance may have stalled after the initial release burst.

Workflow auditcaution

The sole workflow uses a pull_request_target trigger with an untrusted checkout, which creates a meaningful workflow-integrity concern. All 3 of 3 action references are also unpinned, weakening build reproducibility, although the workflow has read-only permissions and no high-severity findings.