justpush/laravel-notification-channel

Release historycaution

This is the package's first release, published today, so there is no release history or cadence demonstrating long-term maintenance. Its recency explains the gap but does not remove the uncertainty.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, so the available history does not yet establish sustained maintenance. The repository's recent push indicates current setup activity but not a durable cadence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and assurance gap for a newly published package.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both referenced actions are unpinned, allowing their resolved code to change over time.