markwalet/laravel-git-state

Project backingcaution

The registry namespace and repository are owned by the same individual account, so the package has direct ownership alignment but no organizational backing shown by this signal.

Repo commit activitycaution

There were no commits and no active maintainers during the last three months. This is a meaningful maintenance concern, although the release history and recent repository push provide some compensating evidence.

Security policycaution

The repository has no security policy. For a package that runs as an application dependency, this weakens the documented process for reporting and handling vulnerabilities.

Workflow auditcaution

All 8 analyzed workflow action references are unpinned, which weakens build reproducibility and update control. No dangerous triggers, untrusted checkouts, script injection, or high-confidence audit findings were detected; missing top-level permissions blocks are acceptable on their own.