gregpriday/laravel-zyte-api

Release historycaution

Only six releases were published, with the latest over two years ago and none in the last 12 months. The short initial release run followed by prolonged inactivity lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with more than two years since the last push. This is the strongest evidence of current maintenance risk.

Security policycaution

No security policy is present in the repository. This is a transparency and vulnerability-reporting gap, though it does not by itself show that the package is unsafe.

Version stabilitycaution

Version 0.2.4 is not a stable major release, and the README explicitly describes the package as early development with possible breaking changes. This makes upgrades less predictable.

Workflow auditcaution

All six analyzed action references are unpinned, reducing build reproducibility and increasing exposure to upstream action changes. There were no untrusted checkouts, script injections, or high-severity audit findings, which limits the impact to a hygiene concern.