jeffersongoncalves/laravel-metrics-posthog

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual rather than an organization, so there is no organizational backing signal to offset the limited maintenance history.

Release historycaution

This is the package's first release, published 0 days ago, so there is no release cadence or track record yet. The linked repository and exact-version release notes provide some transparency but cannot establish long-term maintenance.

Repo commit activitycaution

No commits or active maintainers were observed in the last 3 months. Because the repository is only 0 days old, this is mainly a lack of history rather than evidence that established maintenance has stopped.

Workflow auditcaution

All five workflows were analyzed successfully, all 11 action references are pinned, and no untrusted checkout or script injection was found. However, a high-confidence bot-conditions finding reports that actor context may be spoofable in the Dependabot auto-merge workflow, warranting caution.