macsidigital/laravel-eloquent-extended

Release historycaution

The latest release was on February 24, 2025, and there were no releases in the following 12 months of the collected history. This is meaningful evidence of slowing maintenance for a library.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap. This lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less serious than stopped maintenance.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts or script injection, but all four action references are unpinned and the audit found a high-confidence unpinned container image. Pinning workflow dependencies would improve build reproducibility.