maize-tech/laravel-cloudfront-cookies

Lifecycle scriptscaution

A post-autoload-dump install-time script is present. Such scripts add execution during installation, but this signal provides no evidence that the script is unsafe.

Release historycaution

Only two releases have appeared, both within about one week, while the package is about 312 days old; this leaves a long period without a registry release.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, which is a meaningful maintenance warning for a package released only twice.

Repo issue activitycaution

There are no open issues and two open pull requests, but no issues or pull requests were merged in the last month; this offers limited evidence of current activity.

Workflow auditcaution

All 12 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection findings, so this is a hygiene and workflow-control concern rather than a severe release risk.