myerscode/laravel-api-response

Release historycaution

The package has existed since May 2018 and released once in the last 12 months, but its median release interval is about 108 days, indicating a modest maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently quiet development despite the recent push timestamp.

Security policycaution

The repository has no published security policy, leaving reporting and response expectations less transparent for consumers.

Workflow auditcaution

All five workflows were analyzed and use read-only permissions, with no untrusted checkouts or script injections. However, all 14 action references are unpinned, and high-confidence template-injection findings were reported in release and changelog workflows; template injection alone is hygiene, but the completely unpinned action set warrants caution.