goez/laravel-api-forge

Release historycaution

The package made seven releases in a brief initial burst, then had no releases in the last 12 months; the latest release was over a year ago. This is meaningful evidence of stalled maintenance, although the repository remains available and the package is still stable rather than deprecated.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers confidence in community validation but does not independently make the package unsafe to depend on.

Repo toolingcaution

Composer and Box are used for the build, showing a defined packaging process. No security scanning tools are reported, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This is a transparency gap for a tool that scaffolds application security features, though it is not evidence of a security defect by itself.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, and it scopes permissions at job level. Both action references are unpinned, which leaves avoidable build-integrity risk.