lorisleiva/artisan-ui

Release historydanger

The package has had no release in about five years, with only three releases overall and none in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release gap rather than compensating for it.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while one issue and four pull requests remain open. This supports the picture of inactive maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less serious than the maintenance evidence.

Workflow auditcaution

Both workflows were analyzed successfully and avoid untrusted checkouts, script injection, and broad top-level write permissions. However, a high-confidence finding reports an unpinned container image, creating avoidable build reproducibility and supply-chain risk.