josuapsianturi/laravel-tac

Maintainerscaution

Only one account has registry publish access, creating a thin visible publishing base. The repository is user-owned rather than organization-backed, so there is no provided organizational backing to offset this concern.

Release historycaution

The package has seven releases, but its latest registry release was over a year ago and there were no releases in the last 12 months. This is a meaningful maintenance concern for a UI component library.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months. The unarchived repository is a compensating signal, but the recent activity gap still weakens confidence in ongoing maintenance.

Workflow auditcaution

All three analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in a pull_request_target workflow; the latter can make automation checks unreliable. No untrusted checkout or script-injection sink was found.