morrislaptop/laravel-pulse-4xx

Release historycaution

The package has six releases over about two years and only one release in the last 12 months, with a median interval of about five and a half months. The recent v0.4.0 release shows the project is not abandoned, but the cadence is limited.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. A recent release partly offsets this, but the current maintenance signal is weak.

Security policycaution

The repository has no security policy. For a small Laravel integration this is not severe, but it leaves vulnerability-reporting expectations undocumented.

Version stabilitycaution

This is a non-prerelease release, but the package remains below major version 1. That signals a less mature compatibility commitment than a stable-major package.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in a workflow using pull_request_target. No untrusted checkout or script injection was found, so this is a meaningful hygiene concern rather than a severe dependency risk.