c6digital/laravel-force-https

Release historycaution

The package has only three releases across about two years and one release in the last 12 months, indicating a modest maintenance cadence rather than broad ongoing activity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reducing evidence of current maintenance capacity.

Security policycaution

The repository has no security policy, leaving contributors without a documented reporting route; this is a transparency gap, though it does not by itself make the package unfit.

Workflow auditcaution

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection sink, so this remains a hygiene concern rather than a severe risk.