berthott/laravel-scopeable

Release historydanger

Only two releases exist, with the latest published on February 16, 2023 and none in the last 12 months. This is meaningful abandonment risk for a library, despite the repository being updated more recently than the registry.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Its last push was in December 2024, so recent maintenance capacity is not demonstrated.

Security policycaution

The linked repository has no security policy. This is a transparency gap, though the package is small and the workflow audit found no substantive security findings.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported high- or medium-confidence findings. However, both action references are unpinned, leaving avoidable build reproducibility and action-integrity risk.