maize-tech/laravel-model-expires

Release historycaution

Only three releases have been published across nearly three years, with one release in the last 12 months; the latest release provides some evidence of continued maintenance, but the cadence is sparse.

Repo commit activitycaution

The repository recorded no commits and had no active maintainers in the last three months. A recent release partly offsets this, but the current maintenance gap remains a concern.

Workflow auditcaution

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull-request-target trigger has no untrusted checkout or script-injection sink, limiting the severity.