anuzpandey/laravel-useful-traits

Release historycaution

The latest release was nearly two years ago, and there were no releases in the preceding 12 months of collection. This indicates materially slowed maintenance despite the package having a stable version.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, reinforcing the long release gap and increasing abandonment risk.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package with several runtime dependencies.

Workflow auditcaution

The audit was incomplete because 1 of 4 workflows failed analysis; all 6 analyzed action references were unpinned, two workflows grant top-level write access, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, so this is a serious hygiene concern rather than a standalone critical risk.