bambamboole/laravel-openapi

Maintainerscaution

Only one registry publisher is listed, leaving a thin publishing base. The repository is user-owned rather than organization-backed, so there is no provided evidence of broader maintainer capacity.

Release historycaution

The package has 29 releases since August 2024, but none in the last 12 months, indicating a substantial recent slowdown despite its previously frequent cadence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful sign of currently limited maintenance.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 5 analyzed action references are unpinned, weakening build reproducibility. However, both workflows were analyzed successfully and the audit found no dangerous triggers, untrusted checkouts, script injection, or write-wide permissions.