cleaniquecoders/laravel-action

Release historycaution

The package has 16 releases over about 2 years and 1 release in the last 12 months, including a release on March 31, 2026. That shows ongoing publishing, but the recent cadence is slow.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although version 2.3.0 was released recently, the lack of recent commit activity is a maintenance warning.

Repo issue activitycaution

There are no open issues, but 4 pull requests remain open and none were merged in the last month. This gives limited evidence of active review or follow-through.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow, and all 11 action references are unpinned. No untrusted checkout or script-injection sink was found, so this is a workflow hygiene concern rather than a severe standalone risk.