joshembling/laragenie

Release historydanger

The package has had no releases in about two years, despite 14 releases overall and a previously frequent median interval of about one week. This is strong evidence of stalled maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the evidence that development has stopped.

Project backingcaution

The package is backed by a matching user-owned repository rather than an organization. This provides direct source visibility but does not provide organization-level continuity assurances.

Security policycaution

No repository security policy was found. This is a transparency gap, though it is less significant than the stalled maintenance and workflow findings.

Workflow auditcaution

All seven action references are unpinned, all three workflows grant top-level write permissions, and a high-confidence high-severity bot-conditions finding reports spoofable actor context. The pull_request_target workflow has no untrusted checkout or script injection, which limits the immediate risk.