emiliopedrollo/laravel-secure-passwords

Release historydanger

Only two releases were published, both in December 2017, with no releases in the last eight years. This is strong evidence of an aging release line and raises abandonment concerns.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. Although it was pushed in April 2023, current development activity is absent.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting and handling security issues, though it is not by itself evidence that the package is unsafe.

Version stabilitycaution

v0.2 is not a stable major version, so the package offers limited maturity assurance alongside its very small release history.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence findings, dangerous triggers, or excessive permissions, but all 6 action references are unpinned. That leaves avoidable build-reproducibility and action-substitution risk.