gracjankubicki/laravel-zadarma

Release historycaution

The package has only 2 releases, both on the same day, with a median interval of about 4 hours. This is limited evidence of long-term maintenance for a young package.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. For a package only 131 days old, that suggests maintenance may have slowed substantially.

Workflow auditcaution

All 7 analyzed action references are unpinned, and the release workflow grants top-level write access; six high-confidence template-injection findings also need review. No untrusted checkout or script-injection sink was reported, so this is a workflow-hygiene caution rather than a severe risk.