forepath/laravel-s3-server

Release historycaution

The package has 10 releases, but its latest release was on July 24, 2025 and it has had no releases in the last 12 months. That long pause is a meaningful maintenance concern.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months. Combined with the old last push, this indicates a currently inactive project.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a package implementing authentication and storage access, that weakens the project's vulnerability-reporting transparency.

Workflow auditcaution

All seven analyzed action references are unpinned, and the audit found a high-confidence template-injection pattern plus a medium-confidence archived action. The workflows were fully analyzed and had no untrusted checkouts or script-injection findings, so this is a hygiene concern rather than a severe standalone risk.