imanghafoori/laravel-heyman

Release historycaution

The package has 76 releases over more than eight years, but no releases in the last 12 months and the latest release is over a year old, indicating reduced release activity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful sign of currently limited development activity.

Security policycaution

The repository has no published security policy, which leaves vulnerability-reporting expectations unclear, though this is a modest transparency gap.

Workflow auditcaution

All six analyzed action references are unpinned, weakening build reproducibility and action supply-chain hygiene. However, all workflows were analyzed and the audit found no dangerous triggers, untrusted checkouts, injections, or other findings.