laravel-myanmar-tools/nrc

Release historycaution

The package has only two releases, with the latest published on February 18, 2023, and none in the last 12 months. This is substantial evidence of limited ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since 2023 and increasing abandonment risk.

Security policycaution

The repository has no security policy. This is a transparency gap, though the package's small scope and other repository documentation partly reduce its practical weight.

Workflow auditcaution

All four workflows were analyzed, but all nine action references are unpinned and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection sink, so this is a hygiene and workflow-integrity concern rather than a severe standalone risk.