diagonal/laravel-ts-enum-generator

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That recent inactivity lowers confidence in ongoing maintenance despite the recent release history.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link is less transparent and may not clearly establish that this repository publishes the package.

Security policycaution

The repository has no SECURITY.md or other declared security policy. This is a transparency gap, although it is not by itself evidence that the package is unsafe.

Version stabilitycaution

Version 0.3.3 is not a prerelease, but the package remains below 1.0, so its public API may still change more readily than a stable-major release.

Workflow auditcaution

All four workflows were analyzed, but all nine action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-condition finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, which limits the risk.