devravik/laravel-licensing

Release historycaution

Only two releases have been published, both within roughly 12 hours, and the latest release is nearly seven months old. This is a limited track record and leaves long-term maintenance uncertain.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. For a package released only recently, this lack of recent development is a meaningful maintenance concern.

Repo toolingcaution

The repository uses Composer build tooling but reports no security-scanning tools. The missing scanning is a modest transparency and maintenance gap, partly offset by the presence of automated workflows.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all eight action references are unpinned, which leaves workflow dependencies exposed to upstream changes.