arthurydalgo/laravel-activitylog

Release historycaution

The package has had 105 releases but none in the last 12 months, and its latest release was about 4 years ago. That long period without a new release materially raises abandonment risk.

Repo popularitycaution

The linked repository has 0 stars, forks, and watchers, providing no supporting evidence of an active user or contributor community. Popularity is not required, but this removes an important maintenance signal.

Repository archivedcaution

The repository is not archived, which is reassuring, but it was last pushed about 4 years ago. Its accessible status does not compensate for the lack of recent source activity.

Security policycaution

The repository has no security policy. For a package that records application activity, this is a transparency and vulnerability-reporting gap.

Workflow auditcaution

All 5 workflows were analyzed successfully and have no untrusted checkouts, script injection, or dangerous audit findings, but all 11 action references are unpinned. The workflows also lack top-level permissions blocks, which is acceptable on its own but leaves weaker supply-chain hygiene.