esign/laravel-outbound-ip

Release historycaution

The package is 954 days old with four releases, only one in the last 12 months, and a median interval of about 343 days. The recent 1.3.0 release shows it is not abandoned, but maintenance is infrequent.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The release pushed recently partly offsets this, but the observed development cadence remains quiet.

Repo toolingcaution

The repository uses Composer but reports no security-scanning tools. For a small package this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, although it does not by itself indicate abandonment.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned. The missing top-level permissions block is acceptable on its own.