mitantsoa/laravel-react-starter-kit

Release historycaution

The package has only 2 releases, both within the last 12 months, with the latest published about 363 days after the first release; this is limited maturity rather than abandonment by itself.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the latest release being the last observed project activity and raising maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving an avoidable transparency and maintenance gap for a starter application.

Security policycaution

The repository has no security policy. This modestly reduces disclosure transparency, although it is not evidence that the package is unsafe.

Workflow auditcaution

Both workflows were analyzed with no dangerous sinks or audit findings, but all 5 action references are unpinned and one workflow has top-level write permissions. These are workflow hygiene weaknesses, not severe risks on their own.