akkurateio/laravel-media

Release historydanger

Only two releases were published, both on January 12, 2021, with none in the last five years. This is strong evidence of abandonment for a package intended as a Laravel integration.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no releases for over five years. This materially raises abandonment risk.

Workflow auditdanger

Both workflows were analyzed and have no untrusted triggers or script-injection findings, but all five action references are unpinned and the audit found a high-confidence unpinned container image. That weakens build reproducibility and supply-chain hygiene.

Dependency profilecaution

The package declares eight runtime dependencies, including several related Akkurate and Laravel ecosystem components. This is a meaningful integration surface for a package with no recent maintenance, though the count alone is not unsafe.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe dependency risk by itself.