myerscode/laravel-taxonomies

Release historycaution

The package is mature but releases are infrequent: nine releases since 2018 and one in the last 12 months, with a median interval of about 329 days. The recent release partly offsets the slow cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern for a package with an active stable release.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap but not evidence of abandonment.

Workflow auditcaution

All five workflows were analyzed, but all 15 action references are unpinned, and two high-confidence template-injection findings were reported. One workflow also grants top-level write permissions; without an untrusted trigger, these remain workflow-hygiene concerns rather than a standalone severe risk.