ichinya/laratesto-rector

Release historycaution

The package is only 0 days old, with three releases arriving within about 20 hours. That shows active initial work but provides little evidence of sustained maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the preceding three months, but the repository was pushed recently and the package is newly created. The short history limits confidence more than it proves abandonment.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting vulnerabilities, though security scanning is present and the package is very new.

Version stabilitycaution

Version 0.2.1 is not a stable-major release, so compatibility expectations are lower even though it is not marked as a prerelease.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions with no detected injection or high-severity findings, but both action references are unpinned. Unpinned actions are a supply-chain hygiene weakness.