larva/laravel-sms

Release historycaution

The package has 10 releases over about five and a half years, but none in the last 12 months; the latest release was about 15 months ago. This indicates slowed maintenance rather than abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the repository was updated for the latest release, the recent inactivity lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and assurance gap for a package that handles external SMS integrations.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, sinks, or audit findings. However, its only action reference is unpinned, so the build does not fully protect against action-reference changes.