mg-techlegend/laravel-notify-africa

Release historycaution

The package is only 184 days old and has two releases, with the latest release about 93 days after the first. This shows some release activity but provides limited evidence of a mature maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. With only two releases overall, this weakens evidence that maintenance is continuing.

Security policycaution

No security policy was found in the repository. For a package handling API credentials and message delivery, this is a modest transparency gap, though it is not by itself evidence of unsafe code.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions. The high-confidence bot-conditions finding in the Dependabot auto-merge workflow adds a meaningful supply-chain hygiene concern, despite no untrusted checkout or script-injection findings.