ibecsystems/laravel-porto

Release historycaution

The package has 20 releases, but its latest registry release was over two years ago and there were no releases in the last 12 months. This is a meaningful maintenance concern despite its established release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the lack of recent releases and indicating stalled ongoing maintenance.

Repo popularitycaution

The repository has one star, zero forks, and one watcher, indicating very limited visible adoption. Popularity is only supporting evidence, but this reinforces the maintenance uncertainty.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a modest transparency gap for a package used in application projects.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow; the pull_request_target workflow also has top-level write permissions, though no untrusted checkout or script injection was found.