maize-tech/laravel-tenant-aware

Release historycaution

The project has existed for about 4 years, but only four releases and one release in the last 12 months indicate a slow release cadence. The recent 2.2.0 release partly offsets the concern.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance slowdown. The June release and push provide limited recent counterevidence.

Workflow auditcaution

All five workflows were analyzed, but all 12 action references are unpinned and a high-confidence bot-conditions finding affects the pull_request_target automation. The absence of an untrusted checkout or script-injection sink keeps this from being a severe standalone risk.