kanekescom/laravel-siasn-simpeg

Release historydanger

The package has had 26 releases since September 2023, but none in the last 12 months; the latest release was in July 2024, over two years ago. This is strong evidence of stalled maintenance despite the earlier release history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this materially raises maintenance and abandonment risk.

Workflow auditdanger

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow; three workflows also grant top-level write access. No untrusted checkout or script-injection sink was found, limiting the severity.

Dependency profilecaution

The package declares 10 runtime dependencies, including several related Laravel and SIASN packages. This is a meaningful dependency surface, though it is consistent with a Laravel integration library.

Lifecycle scriptscaution

The package runs a post-autoload-dump lifecycle script during installation. This is worth noting for installation review, but the signal alone does not show an unsafe or unusual action.