derian-cordoba/laravel-bump-version

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the recent release is positive evidence, the lack of follow-up activity creates a maintenance caution.

Repo popularitycaution

The repository has two stars and no forks or watchers. This is weak supporting evidence of community adoption, but popularity alone does not make a small maintained package unhealthy.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.

Security policycaution

The repository has no security policy. That limits disclosure transparency for a Laravel library, though it is not by itself evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of its two action references are unpinned, which weakens build reproducibility.