alchemyguy/youtube-laravel-api

Release historycaution

The package is mature at over 8 years old, but only one release appeared in the last 12 months. This suggests slower maintenance without indicating abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. This is a meaningful maintenance concern, although the recent v2.0.0 release and recent repository push provide some contrary evidence.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency for a package handling OAuth credentials and API access.

Workflow auditcaution

All 11 analyzed action references are unpinned, and one workflow grants top-level write permissions; there were no untrusted checkouts or script-injection findings. The hygiene gaps warrant caution but are not severe on their own.