myerscode/laravel-domain-validator

Release historycaution

The package has four releases over about two years, but only one release in the last 12 months. The release history is usable but not especially active.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the package has a recent release, the current lack of observed development lowers confidence in ongoing maintenance.

Repo popularitycaution

The repository has two stars, zero forks, and one watcher. This is weak supporting evidence for project maturity, though low popularity alone does not make a small package unsafe to adopt.

Security policycaution

The repository has no security policy. Automated Dependabot and composer-audit coverage partly compensates for this, but there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the release workflow has a high-confidence template-injection finding plus top-level write permissions. No untrusted checkout or script-injection trigger was found, so these are workflow hygiene and supply-chain concerns rather than a severe standalone failure.