anuzpandey/laravel-nepali-state-district-city

Registry deprecationdanger

Packagist marks the entire package as abandoned and names anuzpandey/laravel-nepal-geo as its replacement, making continued dependency adoption unsafe.

Repository archiveddanger

The linked repository is archived and was last pushed about two years and three months ago, indicating the project is no longer maintained.

Release historycaution

This package has only one release, published about two years and three months ago, with no releases in the last 12 months; the GitHub release notes provide some documentation but not ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment concern rather than showing an active maintenance path.

Workflow auditcaution

All nine analyzed action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than the main adoption risk.