msazzuhair/laravel-artisan-destroy

Workflow auditdanger

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions. The high-confidence bot-conditions finding in the Dependabot auto-merge workflow adds a concrete CI integrity concern; the pull_request_target trigger has no untrusted checkout or script-injection sink reported.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer reflects a genuinely thin project backing rather than merely publishing hygiene.

Release historycaution

Only two releases were published, with the latest in March 2024 and none in the last 12 months. This is a meaningful maintenance concern for a Laravel package tied to framework versions.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with no releases in the last year, this indicates weak recent maintenance capacity.

Security policycaution

No repository security policy was found. This is a transparency gap, though it is less significant for a small developer-focused Laravel command package.