jornatf/laravel-api-json-response

Release historydanger

Only two releases were published, both in April 2023, with no release in more than three years. This is substantial evidence of abandonment risk despite the stable version format.

Repo commit activitydanger

The repository recorded no commits and had no active maintainers in the last three months, consistent with the long release gap and indicating limited ongoing maintenance.

Security policycaution

No security policy is present in the repository. This is a minor transparency gap, but it is not enough to outweigh the broader maintenance evidence on its own.

Workflow auditcaution

All 12 analyzed action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was detected, so this is a caution rather than a severe workflow risk.