goedemiddag/laravel-schedule-monitor

Release historycaution

The package has eight releases over about 3 years and 8 months, but only one release in the last 12 months with a median interval of about 6 months. This indicates a small, relatively slow release cadence rather than abandonment by itself.

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months. Although the latest release was recent, the absence of recent source activity lowers confidence in ongoing maintenance.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented, creating a minor project-transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or injection findings. However, both action references are unpinned, which weakens build reproducibility; the missing top-level permissions block is acceptable on its own.