maatwebsite/laravel-sidebar

Package scaffoldingdanger

The artifact includes a README and tests, and this version has GitHub release notes, which provide useful consumer and change documentation. However, the README explicitly warns that the project is not actively supported or maintained.

Release historydanger

The package has 21 releases over its history but no release in the last 12 months; its latest release was November 2023. This indicates a substantial maintenance gap for a Laravel dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release-history and maintenance warning. This materially increases abandonment risk.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented. This is a transparency gap, though it is less significant than the maintenance concerns.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. Both referenced actions are unpinned, which weakens build reproducibility but is not a severe risk by itself.