customd/laravel-addressable

Release historycaution

The package has 30 releases over roughly nine years, but none in the last 12 months and its latest release was about 20 months ago. This indicates materially slowed maintenance despite a substantial historical release record.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This is the main abandonment concern, though the repository remains available and unarchived.

Repo popularitycaution

The repository has only one star and one fork, indicating limited external adoption. Popularity is supporting evidence rather than a decisive health measure, and the matching organization backing and repository structure provide stronger context.

Security policycaution

No security policy is present in the repository. This is a transparency gap for reporting vulnerabilities, although the package does have Dependabot scanning configured.

Token permissionscaution

The only workflow lacks top-level token permissions, so its GitHub Actions access is not explicitly constrained to read-only. No write permissions were observed, but explicit least-privilege configuration would be stronger.