brewless/laravel

Release historycaution

The package is only 0 days old and has just 2 releases, both published within the same day. That is too little history to demonstrate durable maintenance, though it is not evidence of abandonment by itself.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest hygiene gap, not a severe risk, especially given the clean workflow audit.

Security policycaution

The repository has no security policy. For a package exposing operational HTTP routes, this is a transparency and vulnerability-reporting gap that is not covered by another provided signal.

Version stabilitycaution

Version v0.2.0 is not a prerelease, but it is below 1.0 and therefore signals an early-stage API and maturity level.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 4 of 4 action references are unpinned, leaving avoidable reproducibility and action-supply-chain risk.