iclimber/laravel-supabase-flysystem

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with a project that has stopped receiving maintenance.

Release historycaution

This is the package's only release, published about two years ago, with no releases in the last 12 months. That provides little evidence of continued maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this offers no visible community cushion for an inactive package.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is less significant than the maintenance evidence.

Workflow auditcaution

All 12 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script injection was found, so this is a hygiene concern rather than a standalone severe risk.