khalyomede/laravel-translate

Maintainerscaution

One registry maintainer is responsible for publishing the package. The linked repository is user-owned rather than organization-backed, so there is limited visible maintainer redundancy.

Release historycaution

The latest release was published in May 2024, with no releases in the last 12 months despite a package age of roughly three and a half years. This indicates meaningful abandonment risk, although the six-release history shows the project was previously maintained.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. That weakens confidence in timely fixes and compatibility updates.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not severe enough to outweigh the package's tests and documentation on its own.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or high-confidence audit findings. However, both action references are unpinned, leaving avoidable workflow supply-chain exposure.