kodegrenade/naija-faker-laravel

Release historycaution

The package is over three years old but has only three releases, with a median interval of about 1 year 2 months and one release in the last 12 months. The recent v1.0.2 release is positive, but the overall cadence remains sparse.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the release itself was recent, the lack of follow-up activity is a meaningful maintenance concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 8 analyzed action references are unpinned, and one workflow grants top-level write permissions. The audit also reported a low-confidence cache-poisoning pattern, which is hygiene concern rather than severe evidence on its own.