alphaolomi/laravel-nida

Release historydanger

The package has had no release in about three years and none in the last 12 months, despite eight releases overall. This materially raises abandonment risk for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. The repository is not archived, but there is no recent activity to offset the concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations unclear. Dependabot is present, which provides some compensating security maintenance support.

Workflow auditcaution

All 8 analyzed action references are unpinned, and high-confidence findings identify a potentially spoofable bot condition and an unpinned container image. The pull_request_target workflow had no untrusted checkout or script-injection sink, limiting the risk to workflow hygiene rather than a severe direct exposure.