lukasmu/laravel-rickroll

Release historycaution

The package has 8 releases since January 2021, but none in the last 12 months and its latest release was about 18 months ago. That is a meaningful maintenance concern for a dependency, though the package may be stable and small.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months, indicating no recent development activity. The non-archived repository and existing release history provide some context but do not offset the current inactivity.

Security policycaution

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, although this is a small package with no other provided security finding.

Workflow auditcaution

All 11 analyzed action references are unpinned, which weakens build reproducibility and leaves workflow dependencies exposed to upstream changes. There were no untrusted checkouts, script injections, or higher-severity audit findings, so this is a hygiene concern rather than a severe workflow risk.