boxed-code/laravel-ip-authorization

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. This is a serious adoption risk because the registry explicitly signals that dependents should move away from it.

Release historydanger

The package has only one release, published about 5 years and 7 months ago, with no releases in the last 12 months. This provides little evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the stale release history, this indicates an inactive maintenance path.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene concern rather than evidence that the release is unsafe by itself.

Workflow auditcaution

The only workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, which is a supply-chain hygiene weakness, while the absence of a top-level permissions block is acceptable on its own.