gogospace/laravel-bulk-cache

Release historycaution

The package is newly published, with two releases on the same day and no meaningful release history yet. The repository was also pushed today, so this shows limited history rather than abandonment.

Repo commit activitycaution

There were zero commits and zero active maintainers in the preceding three months, but the package and repository are newly created, which limits how strongly this indicates stalled maintenance.

Security policycaution

The repository has no security policy, which leaves no documented process for reporting and handling vulnerabilities. This is a transparency gap, though it is not evidence of a vulnerability by itself.

Version stabilitycaution

This is a prerelease beta, and all recent releases are prereleases, so the API and stored cache format may still change. That is a genuine adoption concern for production consumers.

Workflow auditcaution

Both workflows use read-only permissions and have no untrusted checkout or script-injection findings, but all 9 of 9 action references are unpinned, leaving build inputs less reproducible and harder to control.