larasoft-io/cookie-popup

Release historydanger

Only two releases were published, both in a 10-day period, and none appeared in the last five years. This strongly suggests the package is no longer maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Security policycaution

The repository has no security policy, reducing transparency for reporting vulnerabilities. This is a maintenance and disclosure gap, but not evidence that the release is unsafe by itself.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both referenced actions are unpinned. That leaves a modest supply-chain hygiene gap.