luttje/livewire-gloom

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, which is a concrete sign that maintenance has recently stalled.

Workflow auditdanger

All four workflows were analyzed, but all 12 action references are unpinned. The audit also found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow; top-level write permissions add further exposure.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This adds some installation complexity, though the signal does not show that the script is harmful.

Maintainerscaution

Only one registry account, luttje, has publish access. The linked repository is also user-owned rather than organization-backed, leaving a thin publishing and ownership base.

Release historycaution

The package has eight releases over roughly 2 years and 9 months, with two releases in the last 12 months; this shows ongoing publication but a limited recent cadence.