alibori/laravel-jira-package

Release historydanger

This is the package's only release, published more than three years ago, with no releases in the last 12 months. That strongly suggests the package may be abandoned.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Maintainerscaution

The registry lists one maintainer. That is workable for a small package, but it leaves little observed publishing capacity if that maintainer stops responding.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a maintenance and assurance gap, although it is less significant than the package's inactivity.

Workflow auditcaution

Both workflows were fully analyzed with no audit findings or untrusted-trigger sinks. However, all 6 action references are unpinned and one workflow grants top-level write permissions, creating avoidable workflow hygiene risk.