binafy/laravel-stub

Release historycaution

The package has existed for about two years with nine releases, but only one release in the last 12 months indicates a slower recent cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of recently quiet maintenance despite the current release.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

All three workflows were analyzed, but all four action uses are unpinned and a high-confidence bot-conditions finding reports spoofable actor checks. The pull_request_target workflow has top-level write permissions, although no untrusted checkout or script injection was found.