laraxot/module_xot_fila3

Release historydanger

This package has only one release, published over two years ago, with no releases in the past 12 months. That is a substantial continuity and maintenance concern for a dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the past three months. This weakens the evidence that the package is currently maintained, especially alongside its single release.

Workflow auditdanger

All nine workflows were analyzed with no failed files, and no untrusted checkout or script-injection paths were found. However, all 23 action references are unpinned, and high-confidence findings flag a spoofable bot condition and an unpinned container image, creating real workflow supply-chain hygiene risk.

Dependency profilecaution

The package declares 19 runtime dependencies, including several framework and package-specific integrations. This creates meaningful upgrade and compatibility exposure, although it is not by itself evidence of abandonment.

Repo issue activitycaution

There were no new or closed issues or pull requests in the past month, while six pull requests remain open. This suggests limited recent project activity.