jeffersongoncalves/laravel-settings-discord-logger

Release historycaution

This is the first and only release, published 0 days ago, so there is no observed release track record yet. The repository's tests and release notes provide useful initial transparency but cannot demonstrate sustained maintenance.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, but the package is 0 days old, so this reflects lack of history rather than a demonstrated collapse in an established project.

Workflow auditcaution

All five workflows were analyzed and all 12 action references are pinned, with no untrusted checkout or script-injection findings. However, a high-confidence bot-conditions finding says the Dependabot auto-merge workflow may rely on spoofable actor context, and two workflows grant top-level write access.