gigerit/larapex-charts

Release historycaution

This is a young package, about four months old, with only two releases and both published on the same day. That leaves limited evidence of sustained release maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Although a recent push is recorded, the observed period still provides weak evidence of ongoing development.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no SECURITY.md or other security policy, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks, but all 10 action references are unpinned, weakening build reproducibility and update control.