nestednet/laravel-attachments

Release historycaution

The package has 18 releases, but none in the last 12 months and its latest release was nearly seven years ago. This long period without published updates is a meaningful maintenance concern despite the earlier regular release cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, reinforcing that development has effectively stalled. The repository is not archived, but that does not compensate for the prolonged lack of activity.

Repo popularitycaution

The repository has zero stars, one fork, and one watcher, providing little community evidence or outside visibility. Popularity is supporting evidence rather than decisive, but these counts offer no meaningful maintenance cushion.

Repo toolingcaution

Composer is used as the build tool, showing basic project tooling, but no security scanning tools are configured. The missing scanning is a transparency gap for a package that handles file attachments, though it is not by itself a severe risk.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This matters for a package that processes uploaded and downloaded files.