lahiru/laravel-solidgate

Release historycaution

There are eight releases, but all were published within a very short burst on the first release day; this shows initial activity without yet demonstrating a sustained release pattern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, weakening evidence of ongoing maintenance for a package released only recently.

Security policycaution

The repository has no published security policy. That is a transparency gap for a payment integration, although the reported security scanning provides some compensation.

Workflow auditcaution

The single workflow was fully analyzed and has no detected dangerous sinks or audit findings, but all nine action references are unpinned, which weakens build reproducibility; the missing top-level permissions block is not concerning on its own.