mueller-schmitz/laravel-model-integrity

Release historycaution

The package is less than a day old with three releases and a median interval of about 41 minutes. This shows active initial publishing but provides no evidence of sustained maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the three-month window, but the package and repository are less than a day old and the repository had 10 merged pull requests in the last month. The short observation period limits confidence rather than proving abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented. For an integrity-focused package, this is a meaningful transparency gap.

Version stabilitycaution

Version v0.2.0 is not a stable major release, so the API may still change before 1.0. It is not marked as a prerelease, which provides some compensation but does not establish maturity.

Workflow auditcaution

All 13 analyzed action references are unpinned, weakening build reproducibility. However, all workflows use read-only permissions, have no untrusted checkout or script-injection findings, and the audit completed fully, which limits the risk to workflow hygiene.