chrisreedio/laravel-scout-keys

Release historydanger

The package has six releases since September 2024, but none in the last 12 months and its latest registry release is nearly two years old, which raises maintenance and abandonment concerns.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, weakening evidence of current maintenance even though the repository is not archived.

Workflow auditdanger

All 12 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; three workflows also grant top-level write access. No untrusted checkout or script-injection sink was found, which limits the severity.

Dependency profilecaution

Seven runtime dependencies include Laravel Scout and two search-engine clients, making the package reasonably coupled to its ecosystem but not unusually broad for its stated integration.

Lifecycle scriptscaution

A post-autoload-dump install script is present. Lifecycle scripts increase installation complexity and deserve review, but this signal alone does not show harmful behavior.