echoproof/laravel

Release historycaution

This release is from a package only 0 days old with two releases, so there is not yet enough history to demonstrate sustained maintenance; the rapid second release is a small positive for early activity.

Repo commit activitycaution

No commits or active maintainers were observed in the last 3 months, but the repository and package are only 0 days old, so this is primarily an absence of history rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; the available security scanning partly offsets this transparency gap.

Version stabilitycaution

v0.2.0 is not a prerelease, but it is not a stable major version, so compatibility and project maturity remain less established.

Workflow auditcaution

The sole workflow is fully analyzed, uses read-only permissions, and has no dangerous audit findings, but both of its two action references are unpinned, weakening build reproducibility and update integrity.