lloricode/laravel-pandago-sdk

Release historydanger

The latest registry release was over four years ago, with no releases in the last 12 months. That makes compatibility and ongoing maintenance uncertain despite the 21-release history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with no registry releases for over four years, this points to weak observed maintenance.

Workflow auditdanger

All 11 analyzed action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are serious hygiene concerns rather than a standalone critical risk.

Maintainerscaution

Only one registry account has publishing access. This is a limited publisher base, and the available project backing is an individual account rather than an organization.

Repo popularitycaution

The repository has 3 stars, 0 forks, and 1 watcher. Low popularity is not a health verdict, but it provides little supporting evidence or community redundancy.