adrolli/filament-spatie-laravel-activitylog

Release historydanger

This is a 1124-day-old package with only one release and no releases in the last 12 months, which is a substantial abandonment concern for a framework integration.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has seen no activity since its only release and creating meaningful abandonment risk.

Project backingcaution

The package and repository are owned by the same individual account, so there is no observed organization backing to compensate for the thin maintenance history.

Repo popularitycaution

Five stars and no forks indicate a small user and contributor base. Popularity is only supporting evidence, but this provides little evidence of outside maintenance capacity.

Workflow auditcaution

All four workflows were analyzed, with no untrusted checkout or script injection. However, all eight action references are unpinned, one workflow has top-level write permissions, and high-confidence findings flag spoofable bot conditions and an unpinned container image.