fuelviews/laravel-navigation

Dependency profilecaution

Six runtime dependencies, including Laravel, Livewire, and another Fuelviews package, create a meaningful dependency surface for a UI package. The profile is not unusually broad, but adopters inherit several framework and package compatibility constraints.

Release historycaution

The package has 31 releases over about 22 months, but only one release in the last 12 months. That supports an established project while indicating a recently slow release cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although recent pull-request activity exists, the lack of completed commit activity weakens confidence in ongoing maintenance.

Security policycaution

The repository has no security policy. For a package that ships application-facing Laravel components, this is a transparency gap, though it does not by itself show an active security problem.

Workflow auditcaution

All 13 analyzed action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues. No untrusted checkout or script-injection paths were found, so these are workflow hygiene and hardening concerns rather than a standalone release blocker.