huy-nguyen/laravel-optimize-init-db-connection

Release historydanger

This is the sole release, published over two years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance or compatibility work.

Maintainerscaution

Only one registry maintainer is listed, so publishing and maintenance depend on a single person. The linked user-owned repository provides no broader organizational backing to compensate.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long period since the initial release.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that changes database connection behavior.

Workflow auditcaution

The audit found a high-confidence bot-conditions issue, all 6 action references are unpinned, and two workflows grant top-level write permissions. There is no untrusted checkout or script injection, which limits the severity but does not remove the workflow hygiene risk.