ghostcompiler/laravel-querybuilder

Release historycaution

This package is only 110 days old and has one release, so its maintenance record and long-term stability are not yet established.

Repo bus factorcaution

All recent commit activity comes from one contributor, which creates concentration risk; organization ownership provides some ability to hand maintenance off.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last three months, leaving maintenance capacity thin for a package intended for application integration.

Workflow auditcaution

All three workflows were analyzed without high- or medium-severity findings, and none use untrusted triggers or script-injection sinks. However, all six action references are unpinned, leaving avoidable build reproducibility and action-substitution risk.