cleaniquecoders/laravel-billing

Release historycaution

This is a young package at 108 days old with three releases and a median interval of about 44 days. The latest release is recent, but the short history provides limited evidence of long-term maintenance.

Repo commit activitycaution

The repository had four commits from two active maintainers in the last three months, showing ongoing work but a relatively sparse cadence for a young billing package.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response ownership unclear for a package handling billing integrations.

Workflow auditcaution

All 12 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. Three workflows also grant top-level write access, although no untrusted checkout or script-injection sink was found.