creode/laravel-nova-assets

Release historycaution

The package has 31 releases but none in the last 12 months; its latest release was about 18 months ago. Earlier release history shows maturity, but the recent pause raises maintenance risk.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is a meaningful sign of currently limited maintenance capacity.

Security policycaution

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, though Dependabot provides some compensating security tooling.

Workflow auditcaution

All 4 analyzed action references are unpinned, both workflows grant top-level write access, and a high-confidence bot-conditions finding warns that actor context may be spoofable. The pull_request_target workflow has no untrusted checkout or script-injection findings, so this is a hygiene and workflow-integrity concern rather than a severe standalone risk.