comhon-project/laravel-entity-requester

Release historycaution

This release is the package's only release, published 165 days ago, so there is little evidence of an established release cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, despite being pushed more recently, leaving current maintenance capacity uncertain.

Security policycaution

The linked repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a package that processes API requests and authorization rules.

Version stabilitycaution

The package is still on the 0.x line, which signals an API that may change before a stable major release, although it is not marked as a prerelease.

Workflow auditcaution

All 11 action references are unpinned, two workflows grant top-level write access, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection finding, limiting the severity.