micromus/kafka-bus-laravel

Registry deprecationdanger

Packagist marks the entire package as abandoned and names kafka-bus/laravel-bridge as its replacement. Package-wide deprecation is a severe dependency risk even though the release itself is recent.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. That recent inactivity is a maintenance concern for a package that integrates with several framework and messaging components.

Security policycaution

No SECURITY.md or equivalent security policy was found in the repository. This reduces transparency for reporting and handling dependency issues.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow; two workflows also grant top-level write access. The pull_request_target trigger has no untrusted checkout or script-injection sink, so these are workflow hygiene concerns rather than a standalone severe risk.