cesarbosqueiro/laravel-default-config

Release historycaution

The package has only two releases, both published within minutes on the same day, which shows limited release maturity. The repository was pushed more recently, but the release track record remains thin.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, indicating that maintenance has currently gone quiet.

Workflow auditcaution

All seven action references are unpinned, and every workflow grants top-level write permissions. The audit also found a high-confidence bot-condition issue in the Dependabot auto-merge workflow; the pull_request_target trigger has no reported untrusted checkout or script-injection sink, so this is a caution rather than a severe workflow risk.