hosmelq/laravel-open-graph-image

Release historycaution

This is the only release, published about one year ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance for a package with a stable major version.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the lack of follow-up releases and raising maintenance risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, though it does not by itself show that the package is unsafe.

Workflow auditcaution

The audit found a high-confidence template-injection issue in the changelog workflow, and all 13 action references are unpinned; the absence of untrusted checkouts or script injection limits the risk, but workflow reproducibility and safety need improvement.