lionix/castable-request

The package includes a full test suite, changelog, release notes, and a repository that matches the package. Workflow references are all unpinned, and the project has no security policy or security-scanning tools.

Latest 2.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only 3 releases have been published since September 2020, with one release in the last 12 months and a median interval of about 3 years. The release published today provides some current evidence, but the long gaps reduce maintenance confidence.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. The same-day release and two merged pull requests in the last month show recent activity, but do not remove the risk of a thin maintenance cadence.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policy

The repository has no security policy. For a reusable Laravel library, this leaves vulnerability-reporting expectations undocumented.

Workflow audit

Both workflows were analyzed successfully with no audit findings or untrusted checkout and script-injection paths. However, all 6 action references are unpinned, and one release workflow grants top-level write permissions, creating avoidable workflow hygiene risk.