apsbd/grok-laravel

Release historycaution

This is the package's only release, published about 14 months ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a young package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Together with the single-release history, this is a meaningful abandonment concern.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is less severe than evidence of an unsafe workflow or an archived project.

Workflow auditcaution

Both workflows were analyzed with no untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned and one workflow grants top-level write access, which weakens build reproducibility and least-privilege hygiene.