antwerpes/laravel-soap

Release historycaution

This is the package's only release, published about 1 year 4 months ago, with no releases in the last 12 months. That leaves update responsiveness and maintenance maturity unproven.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last 3 months. The organization-backed repository is not archived, but there is no recent activity to offset the pause.

Security policycaution

The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities. This is a moderate documentation gap, not evidence of unsafe code by itself.

Workflow auditcaution

The audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow, and all 14 analyzed action references are unpinned. There are no untrusted checkouts or script-injection findings, so this is a hygiene concern rather than a standalone critical risk.