hosttech/laravel-slack-block-kit-builder

Release historycaution

This is the only release, published about 2 years and 2 months ago, with no releases in the last 12 months. That materially limits evidence of continued maintenance, though the package is not deprecated or archived.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, consistent with a project that has not progressed since its initial release. This raises maintenance and abandonment risk.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. For a small PHP library this is a hygiene gap rather than evidence of abandonment.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations unclear. This is a transparency weakness, not a standalone indication that the package is unsafe.

Workflow auditcaution

Both workflows completed the audit without untrusted checkouts, injection findings, or broad top-level write permissions. However, all 6 referenced actions are unpinned, so workflow dependencies are less reproducible and deserve caution.