alphaolomi/laravel-repman

Release historydanger

Only four releases exist, with no registry release in the last 12 months; the latest release was published in March 2023, indicating a long release gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance capacity.

Version stabilitycaution

This release is explicitly an alpha, and half of recent releases are prereleases, so the version carries meaningful stability risk for dependents.

Workflow auditcaution

All 14 action references are unpinned, and a high-confidence bot-conditions finding reports that actor context may be spoofable in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe package risk.