enflow/laravel-outdated-browser

Release historycaution

The package is mature at over five years old, but it has only 8 releases and one release in the last 12 months, with a median interval of about 11 months. This indicates a slow release cadence rather than abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release and repository push provide some evidence of continued ownership, but current maintenance activity is still quiet.

Workflow auditcaution

All three workflows were analyzed, but all 6 action references are unpinned, which is a hygiene concern. The audit also found one high-confidence bot-conditions issue in the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script-injection sink, so this is caution rather than danger.