doloan09/laravel-model-expires

Project backingcaution

The registry namespace and repository are owned by the same individual account, so ownership is clear, but there is no organizational backing shown to compensate for the thin maintainer base.

Release historycaution

This is the only release, published in April 2023, with no releases in the last 12 months; the long period without a new release raises abandonment and compatibility concerns.

Repo commit activitycaution

There were no commits and no active maintainers during the last three months, consistent with the package having seen no release since April 2023 and indicating limited ongoing maintenance.

Repo toolingcaution

Composer is used for builds, but no repository security-scanning tool was detected; this is a modest transparency and hygiene gap rather than evidence of an unsafe package.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or high-severity issues. However, both action references are unpinned, leaving the workflow exposed to changes in referenced action code.