hirehq/laravel-bank-holidays

Release historycaution

The package is about five and a half months old but has only one release, so there is not yet enough release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, leaving maintenance continuity unproven after the initial release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous sinks or audit findings, but all five action references are unpinned and one workflow grants top-level write permissions, creating a mild reproducibility and permission-hygiene concern.