jdefez/laravel-graphql

Release historydanger

The latest release was nearly five years ago, with six releases concentrated in the first few days and none in the last 12 months. This strongly indicates the package is no longer actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap and increasing abandonment risk.

Security policycaution

The repository has no security policy. For a small, stale package this reduces the transparency of vulnerability reporting, though it is secondary to the observed maintenance gap.

Version stabilitycaution

Version v0.1.5 is not a stable major release, so the API may still change; combined with the stale project, this makes adoption riskier than the version label alone suggests.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, its one action reference is unpinned, which weakens build reproducibility without creating a severe risk on its own.