mahdimajidzadeh/laravel-unsplash

Release historycaution

The package is mature at over eight years old, but has only seven releases and one release in the last 12 months, indicating a slow cadence. The recent v0.1.6 release partly offsets that concern.

Security policycaution

The repository has no security policy, leaving disclosure and response procedures undocumented. This is a transparency gap, but it is not evidence that the package is unsafe.

Version stabilitycaution

v0.1.6 is not a prerelease, although the package remains below major version 1.0. That is a mild maturity caveat rather than a severe stability concern.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkouts, injection findings, or excessive top-level permissions. However, all five action references are unpinned, creating a modest build-reproducibility and dependency-hygiene concern.