maize-tech/laravel-markable

Release historycaution

The package has existed for about 4 years and 6 months with 10 releases, but only one release in the last 12 months and a median interval of about 6 months indicate a slow maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release and repository push provide some compensating evidence.

Workflow auditcaution

All five workflows were analyzed, but all 11 action references are unpinned and one high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; its pull_request_target trigger and write permissions increase workflow hygiene risk, though no untrusted checkout or script injection was found.