networkrailbusinesssystems/laravel-model-states

Dangerous workflowscaution

One of three workflows uses pull_request_target, which requires elevated trust because it can run with repository privileges, although no untrusted checkout or script-injection pattern was detected.

Release historycaution

This package is 178 days old but has only one release, so there is little release history to demonstrate sustained maintenance or compatibility handling.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful maintenance concern for a package with only one release.

Repo popularitycaution

The repository has zero stars and one fork, offering little community validation; this is supporting evidence only and is partly expected for a newly published package.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.