kiendaotac/laravel-docker

Release historydanger

The package has only two releases, with the latest on January 10, 2022, and none in the last 12 months. This long release gap materially raises abandonment and compatibility risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release pause. This is strong evidence of inactive maintenance.

Workflow auditcaution

All 11 analyzed action references are unpinned, and two high-confidence findings identify spoofable bot conditions and an unpinned container image. The pull-request trigger has no untrusted checkout or script-injection sink, which limits the risk but leaves significant workflow hygiene concerns.