creativecrafts/laravel-role-permission-manager

Release historycaution

The package has four releases across about 20 months, but only one release in the last year. The latest release is recent enough to show ongoing publication, though the overall cadence is thin.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release provides some compensating evidence, this is a meaningful sign of currently quiet maintenance.

Security policycaution

No security policy was found in the repository. For a package that manages application roles and permissions, this reduces transparency around vulnerability reporting.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. Three workflows also grant top-level write access; with no untrusted checkout or script-injection findings, this is a workflow-hygiene concern rather than a severe standalone risk.