maize-tech/laravel-excludable

Release historycaution

The package has had no releases in the last 12 months, and its latest registry release was in March 2024. This is a meaningful maintenance concern despite six releases over its lifetime.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the absent recent release activity, this lowers confidence in ongoing maintenance.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue; two workflows also grant top-level write permissions. No untrusted checkout or script-injection sink was found, so this is a hygiene caution rather than a severe supply-chain finding.