grazulex/laravel-flowpipe

Release historycaution

The package has only three releases over 423 days, with a median interval of about 212 days; this indicates a slow release cadence, although a release was published recently.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, despite the recent repository push and current release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and review gap.

Security policycaution

The repository has no security policy, so users have no documented project-specific process for reporting vulnerabilities or receiving security guidance.

Token permissionscaution

Two workflows declare read-only permissions, but the release workflow has top-level write permissions. This is broader automation access than necessary unless the release process requires it.