jian-kuang/aliyun-oss-laravel

Release historydanger

The package has had no release in more than four years: its latest release was April 28, 2022, despite 17 total releases. This strongly increases abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no observed maintenance capacity.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a secondary concern because the package is small and otherwise has a visible source repository.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous findings, but all 6 of its action references are unpinned. That leaves the build exposed to moving action contents, a meaningful supply-chain hygiene gap.