daftspunk/laravel-config-writer

Release historycaution

The package has four releases but none in the last 12 months; the latest release was in August 2023, indicating materially slowed maintenance for a dependency assessed in 2026.

Repo commit activitycaution

There were no commits from active maintainers in the last 3 months, consistent with an inactive project and increasing abandonment risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is configured; this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented and reducing maintenance transparency.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported audit findings, but all three action references are unpinned, weakening build reproducibility and update control.