matheusmarnt/livecharts

Maintainerscaution

Only one account has registry publish access, and the project is user-owned rather than organization-backed. This indicates a thin publishing and support base, though it does not by itself show abandonment.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although releases continued during that period, the absent underlying development activity lowers confidence in ongoing maintenance.

Security policycaution

The repository has no security policy. This is a transparency and incident-response gap for a package that integrates with Laravel applications.

Workflow auditcaution

All 20 analyzed action references are unpinned, five workflows grant top-level write access, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The audit found no untrusted checkout or script-injection sinks, so this is a meaningful hygiene concern rather than a severe standalone risk.