bolivir/laravel-doctrine-sanctum

Release historycaution

The package has 12 releases over about five and a half years, but it has had no releases in the last 12 months and its latest release was about 19 months ago. This raises maintenance uncertainty despite a previously established release history.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which weakens evidence of active maintenance. The repository's more recent push prevents treating the project as abandoned outright.

Repo popularitycaution

The repository has 3 stars, 2 forks, and 1 watcher, indicating a small adoption base. This is supporting caution about maintenance capacity, not a verdict by itself.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting expectations unclear. This is a hygiene concern rather than evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no detected dangerous sinks or audit findings, but all 8 of 8 action references are unpinned. That leaves avoidable dependency-integrity risk in the build workflow.