myerscode/laravel-query-strategies

Release historycaution

The package has existed since 2018 but has only eight releases and one release in the last 12 months, indicating a deliberate but slow release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance after the latest release.

Repo popularitycaution

The repository has four stars, zero forks, and one watcher; this is limited adoption evidence, though popularity is only supporting evidence.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four workflows were analyzed, but all 12 action references are unpinned and the release workflow has a high-confidence template-injection finding; one workflow also grants top-level write permissions. The template-injection finding is hygiene risk on its own, while the unpinned actions and broad release permissions increase supply-chain exposure.