lykegenes/laravel-locale-switcher

Maintainerscaution

Only one account has registry publish access. This is a limited visible publishing base for a user-owned project, though registry access alone does not prove how many people maintain the source.

Release historycaution

The package has 14 releases over more than 11 years, but none in the last four years; the latest registry release was in June 2022. This is a substantial maintenance concern, although the stable release and non-archived repository provide some compensation.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push nearly four years ago. The project is not archived, but the absence of recent activity materially increases abandonment risk.

Security policycaution

The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is not evidence of a vulnerability by itself.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all three action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene concern.