goedemiddag/laravel-autodiscovery-lock

Release historycaution

The package has existed since November 2022 and has seven releases, but only one release in the last 12 months with a median interval of about 124 days. This indicates modest rather than strong release activity.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although the recent release shows some activity, the current pause raises a moderate maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning layer is a modest transparency and maintenance weakness, not evidence of unsafe code.

Security policycaution

The repository has no security policy. For a package used in application build and discovery workflows, this leaves vulnerability-reporting expectations unclear.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of its two action references are unpinned, leaving avoidable build-integrity exposure.