mrethical/laravel-buyproxies

Dangerous workflowscaution

One workflow uses pull_request_target for Dependabot auto-merging, which carries elevated automation risk, although no untrusted checkout or script-injection pattern was detected.

Project backingcaution

The registry namespace and repository owner match, but the project is backed by an individual user rather than an organization, so the single-maintainer context offers limited continuity.

Release historycaution

This is the only release, published about three and a half years ago, with no releases in the last 12 months. That substantially increases the risk that maintenance has stalled.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a package with only one historical release, this is a meaningful abandonment concern.

Repo issue activitycaution

There are three open pull requests and none were merged in the last month, suggesting that available changes may not be receiving timely attention.