digifactory/laravel-ai-spam-detector

Release historycaution

The package was first released today and has only two releases, so there is not yet enough history to demonstrate sustained maintenance.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. Because the project is only hours old, this is partly explained by its age but still leaves maintenance capacity unproven.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a modest transparency gap for a package that processes application requests.

Version stabilitycaution

Version 0.0.2 is an early 0.x release rather than a stable major release, indicating a less mature API and project.

Workflow auditcaution

All five workflows were analyzed and all action references are pinned, but a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. Three workflows also grant top-level write access, which adds mild permission risk.