martin-ro/laravel-herdr

Release historycaution

The package is only 50 days old and has two releases, with the latest release on the initial publication date; this provides limited evidence of sustained release maturity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance gap for a new package.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version v0.2.0 is a non-stable-major release, so the public API may still change even though it is not marked as a prerelease.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but both action references are unpinned. The absence of a top-level permissions block is acceptable on its own.