devlabor/laravel-api

Release historydanger

The package has had no release in nearly four years, despite seven releases since 2019; this materially raises abandonment risk for a Laravel integration package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is partly offset by the repository's Psalm and Sonar security tooling.

Workflow auditcaution

All eight analyzed action references are unpinned, and a high-confidence audit found an unpinned container image. The workflows have no untrusted triggers or script-injection findings, which limits the impact to a meaningful hygiene concern rather than a severe risk.