me-arif-dewan/laravel-repository-generator

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has stalled recently.

Workflow auditdanger

All 14 action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. Four workflows also grant top-level write permissions; the pull_request_target trigger has no untrusted checkout or script-injection sink, so this remains a serious hygiene concern rather than a standalone critical risk.

Maintainerscaution

One registry maintainer is consistent with a personal project, but it leaves limited visible publishing redundancy when combined with the small project footprint.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single-maintainer and limited-activity concerns are not compensated by visible organizational backing.

Release historycaution

Only two releases were published, both within a short period, and no newer registry release followed over roughly 11 months. This indicates a thin release history and uncertain ongoing maintenance.