hitocean/laravel-auth

Release historydanger

The package has had no release in about four years, with no releases in the last 12 months. Combined with the archived repository, this strongly indicates that maintenance has stopped.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months. This confirms there is no recent maintenance activity to offset the older release history.

Repository archiveddanger

The linked repository is archived, and its last push was about three years ago. An archived source project is a severe abandonment risk for a dependency.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear, which matters for an authentication package.

Workflow auditcaution

All eight analyzed action references are unpinned, and the audit found high-confidence bot-condition and unpinned-image issues. The pull_request_target workflow also has top-level write permissions, creating avoidable workflow hygiene and supply-chain exposure.