devtical/laravel-drunk-on-419

Release historycaution

Only three releases exist, with none in the last 12 months and the latest release about 20 months ago. This is a meaningful maintenance concern despite the short early release interval.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the repository was pushed about two months ago, the measured commit activity still indicates limited recent maintenance.

Security policycaution

The repository has no published security policy. This is a transparency gap, though it is less significant for this small middleware package than for security-sensitive software.

Workflow auditcaution

All four workflows were analyzed, but all nine action references are unpinned and three workflows grant top-level write permissions. A high-confidence bot-conditions finding also affects the Dependabot auto-merge workflow; no untrusted checkout or script-injection sink was found, so this is a caution rather than a severe risk.