foxen/laravel-uk-bank-holidays

Release historycaution

The package is only 205 days old and has two releases, with a median interval of about 21 days. This shows some release activity but provides limited evidence of long-term maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a new package, that weakens evidence of ongoing maintenance.

Security policycaution

The repository has no security policy. This is a transparency gap, though it is less severe for a small package with no other indicated security-process failure.

Workflow auditcaution

All 12 action references are unpinned, and the audit found a high-confidence bot-conditions issue in a pull_request_target workflow; the workflow also has broad write permissions. No untrusted checkout or script-injection sink was found, limiting the impact to caution rather than danger.