aliziodev/laravel-karyawan-core

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months. For a package this new, that is a meaningful warning about sustained maintenance capacity.

Release historycaution

All four releases arrived within roughly 20 minutes on the first release day, and the package is only 157 days old. This shows active initial publication but not an established maintenance record.

Security policycaution

The repository has no SECURITY.md or equivalent security policy. This is a transparency and maintenance gap, though it is not severe enough to make the release unfit by itself.

Workflow auditcaution

Both workflows were fully analyzed with no reported audit findings or untrusted checkout sinks, but all five action references are unpinned and one workflow grants top-level write access. These are workflow hygiene concerns rather than a standalone severe risk.