coderflex/laravel-csv

Dangerous workflowscaution

One workflow uses pull_request_target for Dependabot auto-merge, which can carry elevated workflow risk. No untrusted checkouts or script-injection patterns were detected, limiting the concern.

Release historycaution

The package has 10 releases over roughly four years, but its latest registry release was about 18 months ago and there were no releases in the last 12 months. That lowers confidence in current maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This is a meaningful maintenance concern, although the repository was pushed in January 2026.

Repo issue activitycaution

There are no open issues and five open pull requests, but no issues or pull requests were merged in the last month. The open pull requests suggest some pending maintenance rather than a fully active support cycle.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for users of this package.