cybex/laravel-lodor

Release historycaution

The package has 13 releases but none in the last 12 months, with the latest release in February 2022. This long release gap materially raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the multi-year release gap and indicating no recent maintenance.

Repo popularitycaution

The repository has 3 stars, 0 forks, and 1 watcher. Low popularity is only supporting evidence, but it provides little indication of a broad contributor or user base to compensate for inactivity.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities. This is a secondary concern alongside the stronger maintenance evidence.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection paths, but all 3 action references are unpinned. The cache-poisoning finding is low confidence, so it is hygiene rather than a severe risk.