codesquirrel/artisan-runner-ui

Release historycaution

The package is brand new, with only two releases over roughly 2 hours and no longer maintenance record. This shows active initial publishing but provides little evidence of sustained maintenance.

Repo commit activitycaution

No commits or active maintainers were recorded during the last three months. Because the package itself is only hours old, this mainly reflects limited history rather than proven abandonment, but it leaves maintenance capacity unestablished.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected. That is a modest transparency and hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. For a package that exposes a web UI capable of running application commands, the missing reporting and response guidance is a meaningful documentation gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, so their future contents are not fixed even though the workflow has no current high-severity finding.