bnussbau/laravel-trmnl

Clear licensing, documentation, release notes, tests, and security tooling support adoption. Recent repository activity has stopped for three months, while every workflow action is unpinned and one high-confidence workflow audit finding weakens automation hygiene.

Latest 2.3.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Lifecycle scripts

A post-autoload-dump install script is present, which adds execution during installation; the signal does not show that it performs unsafe or unusual work.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of slowing maintenance despite recent releases and a recent push.

Workflow audit

All five workflows were analyzed, but all 12 action references are unpinned. The audit also found a high-confidence bot-condition issue in the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script-injection sink, so this is not a severe standalone risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Benjamin Nussbaum

Direct Dependencies

Dependency	Last Release	Score
illuminate/contracts Version ^10.0\|\|^11.0\|\|^12.0\|\|^13.0	—	—
voku/simple_html_dom Version ^5.0	—	—
bnussbau/laravel-trmnl-blade Version ^3.0.3	—	—
spatie/laravel-package-tools Version ^1.18	—	—