codedor/laravel-livewire-forms

Registry deprecationdanger

Packagist marks the entire package as abandoned and names wotz/laravel-livewire-forms as its replacement. This is a major adoption and maintenance warning, even though the assessed release is not individually withdrawn.

Release historycaution

The package has existed for over six years with 11 releases, but only one release in the last 12 months and a median interval of about 108 days indicate a modest maintenance pace.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That recent inactivity increases the risk that issues or compatibility changes will not be addressed promptly.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, but it is less serious than abandonment or a withdrawn release.

Workflow auditcaution

Both analyzed workflows use top-level write permissions and all five action references are unpinned, creating reproducibility and token-scope hygiene concerns. No untrusted checkout, script injection, or auditor findings were detected, so this is not a severe workflow risk.