ahmadrezaei/laravel-real-client-ip

Release historycaution

The package is only 55 days old and has one release, so there is not enough release history to demonstrate sustained maintenance.

Repo bus factorcaution

One contributor owns 100% of the recent commits. As a user-owned project, there is no organizational backing shown to compensate for this concentration.

Repo commit activitycaution

Only two commits were recorded in the last three months, all from one active maintainer, which provides limited evidence of ongoing maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted checkout/script-injection paths, but all four referenced actions are unpinned, creating avoidable reproducibility and update risk.