balazstanka/laravel-telegram-alerts

Maintainerscaution

Only one registry maintainer is listed. Because the repository is user-owned rather than organization-backed, this leaves a thin support base and increases continuity risk.

Release historycaution

This is the package's first release, published today, with only one release recorded. That is expected for a new project but provides no evidence of sustained maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, but the repository and package are only one day old. This is an evidence gap rather than proof of abandonment.

Workflow auditcaution

All two workflows were analyzed, all five action references are pinned, and no high-confidence audit findings or untrusted checkouts were found. One workflow has top-level write permissions, a mild hygiene concern without an untrusted trigger or sink.