nckrtl/launch-laravel

Release historycaution

The package is only 42 days old, with 31 releases concentrated on its first day and a median interval of 0 days. This shows active initial development but provides little evidence of sustained maintenance.

Repo bus factorcaution

All 16 commits in the last 3 months came from one contributor, leaving maintenance and release continuity dependent on a single person.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a package that generates authentication and account-management code.

Version stabilitycaution

Version v0.3.9 is not a prerelease, but the package remains below 1.0, so its API and generated scaffolding may still change substantially.

Workflow auditcaution

All 15 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue in a pull_request_target workflow. There were no untrusted checkouts or script-injection findings, which limits the risk.