ensi/laravel-prometheus

Release historycaution

The package is mature at about 3 years and 9 months old with 16 releases, but only one release in the last 12 months indicates a slower maintenance cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is meaningful evidence of slowed maintenance despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and review gap.

Workflow auditcaution

Both workflows were analyzed with no untrusted triggers or script injection, but the audit found a high-confidence unpinned container image and all four action references are unpinned, weakening build reproducibility.