casawatt/laravel-ai-agent-evaluation

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a package only about four months old.

Repo issue activitycaution

There are three open pull requests and one new pull request in the last month, suggesting some ongoing involvement despite no recorded commits, although none were merged in that period.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap but not evidence of abandonment by itself.

Version stabilitycaution

Version v0.8.0 is not a stable major release, so its API may still change, though it is not marked as a prerelease and recent releases have been consistent.

Workflow auditcaution

All 12 action references are unpinned, and three workflows grant top-level write permissions. The audit also found a high-confidence bot-conditions issue, but no untrusted checkout or script-injection sink was reported, so this is a hygiene concern rather than a severe dependency risk.