binafy/laravel-reactions

Release historycaution

The package has existed for about two years with 13 releases, but only one release appeared in the last 12 months, indicating a slower release cadence.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance dependent on a single active developer. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded three commits in the last three months, showing recent work but a modest maintenance pace.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or audit findings, and one workflow uses read-only permissions. However, all three analyzed action references are unpinned, weakening build reproducibility.