finller/laravel-insee-siren

Release historycaution

The latest release was over two years ago, with no releases in the last 12 months. Four releases were published close together, but there is no evidence of continued release maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, indicating little recent development activity despite the repository not being archived.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Version stabilitycaution

Version v0.0.4 is not a stable major release, so the package may still have compatibility risk for consumers. It is not marked as a prerelease, which partly offsets that concern.

Workflow auditcaution

All 12 analyzed action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, so this is a hygiene and maintenance concern rather than a severe standalone risk.