andriichuk/laravel-letsads-sms-channel

Maintainerscaution

Only one registry account has publish access. The repository is user-owned rather than organization-backed, and the lack of recent commits provides no compensating evidence of a broader active maintainer base.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance and abandonment concern despite a recent push timestamp elsewhere.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Version stabilitycaution

Version 0.1.4 is not on a stable major version, so compatibility and maturity are less established, although it is not marked as a prerelease.

Workflow auditcaution

All 12 action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe workflow risk.