devesharp/boilerplate-laravel-9.0

Release historycaution

The package is 1,487 days old with four releases, but it has had no release in the last 12 months and its latest release was in October 2022. That long gap materially raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's extended release gap. This is a significant maintenance concern for a Laravel application template.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling security issues. This adds a transparency gap, although it is less serious than the lack of recent maintenance.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkout paths, which is positive. However, all 9 action references are unpinned, leaving avoidable build reproducibility and action-change exposure.