jafar-albadarneh/laravel-business-rules

Release historydanger

The package has only two releases, with none in the last three years and none in the last 12 months. This is strong evidence of abandonment risk despite the package remaining unde​precated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Repo popularitycaution

The repository has one star and no forks. This is limited supporting evidence, but popularity alone is not a health verdict for a small package.

Security policycaution

The repository has no security policy. That weakens transparency for reporting issues, although it is less important than the maintenance signals for this package.

Workflow auditcaution

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not independently dangerous.