bilfeldt/laravel-flash-message

Maintainerscaution

Only one registry account has publish access. Because the repository is user-owned rather than organization-owned, this represents a thin publishing base, although observed repository activity is also relevant.

Release historycaution

The package has existed since November 2021 with 13 releases, but only one release in the last 12 months; the latest release is recent enough to offset some concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. A recent release partly offsets this, but the current quiet period still raises support risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest hygiene gap rather than evidence of unsafe code.

Workflow auditcaution

The sole workflow was fully analyzed with no reported audit findings or untrusted checkout and script-injection paths. However, both of its two action references are unpinned, leaving avoidable supply-chain variability.