laravel-notification-channels/pushwoosh

Release historycaution

The package has 16 releases over roughly 7 years and only one release in the last 12 months, indicating a modest maintenance pace. The recent v4.0.0 release provides evidence that the project is not abandoned.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. Because the release itself was published recently, this suggests limited ongoing activity rather than clear abandonment.

Repo toolingcaution

Composer is used for the build, but no repository security scanning tool was detected. This is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is not by itself evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both of its two action references are unpinned. The clean audit offsets much of the workflow risk while leaving a supply-chain hygiene gap.