honlapbirodalom/laravel-chilkat

Release historycaution

The latest registry release was 24 June 2024, with no releases in the last 12 months. That is a meaningful maintenance concern despite the package having 11 releases overall and a previously regular release interval.

Repo commit activitycaution

There were zero commits and zero active maintainers in the three months measured. This is a direct sign of currently inactive development and reinforces the stale registry release history.

Workflow auditcaution

All four workflows were analyzed, but all 10 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding reports spoofable actor context in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene and workflow-integrity concern rather than a severe standalone risk.