blamodex/laravel-tags

Release historycaution

The package has only two releases across 292 days, with a median interval of about 174 days. That is sparse for a young library and limits evidence of sustained maintenance, though the latest release is recent enough to avoid an abandonment verdict.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This is a meaningful maintenance concern, although the package had a release during the observed period.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it does not by itself indicate that the package is unsafe to adopt.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous findings, triggers, or write-wide permissions. Both action references are unpinned, which is a modest reproducibility and supply-chain hygiene weakness.