ferdiunal/laravel-cache-couchdb

Release historydanger

Only two releases were published, both around the first release in May 2023, with no releases in about three years. This is strong evidence of an inactive release line.

Repo commit activitydanger

There were zero commits and zero active maintainers in the past three months, consistent with the package having received no meaningful maintenance since 2023.

Workflow auditdanger

All 12 analyzed action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, limiting the severity.

Maintainerscaution

One registry maintainer is consistent with a user-owned project, but it provides little redundancy if that maintainer stops maintaining the package.

Project backingcaution

The registry namespace and repository are owned by the same individual, confirming a coherent user-backed project but not providing organizational maintenance capacity.