apkk/laravel-security-guard

Project backingcaution

The registry namespace and repository owner are connected, but the owner is an individual account rather than an organization. This provides ownership context without strong evidence of a broader maintenance team.

Release historycaution

The package is only 45 days old with three releases, and the median interval is about 17 hours. This shows active initial development but provides too little history to establish long-term maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers. The project is very young, so this is weak supporting evidence rather than a standalone abandonment signal.

Version stabilitycaution

Version v0.3.0 is not a stable major release, so the public API may still change. It is not marked as a prerelease, which provides some compensation.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous sinks or audit findings, but all 12 action references are unpinned. That leaves avoidable build-integrity exposure despite the otherwise clean audit.