chrisreedio/laravel-healthnote-sdk

Release historycaution

The package has had no registry release in the last 12 months, and its latest release was on February 25, 2025. The repository was pushed more recently, which partly offsets the release gap but does not show continued published maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the repository is not archived and has a more recent push recorded.

Security policycaution

The repository has no security policy, which reduces transparency for reporting vulnerabilities in an API SDK.

Version stabilitycaution

The assessed release is a beta, and all recent releases are prereleases, so compatibility expectations are lower than for a stable major release.

Workflow auditcaution

All 12 action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. One workflow also combines a pull_request_target trigger with broad write permissions, increasing automation hygiene risk even without an untrusted checkout or script injection.