cruzvale33/sepa-laravel

Release historycaution

The package has had no release in about 17 months and made all four releases within roughly two hours in April 2025. That short burst followed by a long pause raises maintenance risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the roughly 17-month release gap. This materially increases abandonment risk.

Security policycaution

The linked repository has no security policy. That limits transparency about vulnerability reporting, although it is a gap rather than evidence that the package is unsafe.

Workflow auditcaution

All 8 analyzed action references are unpinned, and two of the three workflows grant top-level write access. No untrusted checkout, script injection, or auditor findings were reported, so this is a hygiene concern rather than a severe workflow risk.