brokeyourbike/country-casts-laravel

Release historycaution

The latest release was over three years ago, with no releases in the last 12 months and only three releases overall. That suggests the package may be stable, but it also leaves current maintenance uncertain.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is a meaningful abandonment risk for a package integrated into an application.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a maintenance hygiene gap, though it is not evidence that the release is unsafe.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This matters more when the project shows little recent activity.

Workflow auditcaution

All eight analyzed action references are unpinned, and one high-confidence medium-severity finding identifies an archived action. The workflows have no untrusted checkouts or script injection, which limits the risk.