grazulex/laravel-draftable

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization, leaving less visible institutional backing for long-term continuity.

Release historycaution

The package is about 404 days old but has only two releases, with one release in the last 12 months; this is limited evidence of sustained maintenance for a production-oriented Laravel library.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although the current release is recent, the lack of recent development activity creates a meaningful maintenance and abandonment concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.

Token permissionscaution

Two workflows use read-only permissions, while the release workflow has top-level write permissions. Write access is understandable for publishing, but broad release permissions warrant some supply-chain caution.