anuzpandey/laravel-useful-mixins

Release historycaution

All four releases were published within one day in May 2024, with no releases in the last 12 months and the package now about two years old. This suggests a limited maintenance cadence, although the repository has since received a push.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That indicates weak recent development activity, even though the repository is not archived.

Security policycaution

The repository has no security policy, leaving no documented reporting path for vulnerabilities. The README points to a security policy, but the collected repository evidence shows none exists.

Workflow auditcaution

The audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow, and all nine action references are unpinned; three workflows also grant top-level write permissions. The pull-request trigger has no untrusted checkout or script-injection sink, so this is a meaningful hygiene and automation risk rather than a release-blocking failure.