nguyentranchung/livewire-starter-kit

Release historycaution

The package has made four releases, but all were clustered around its April 2025 launch and there have been no releases in the following 17 months. That is a meaningful maintenance concern for a starter kit.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the absence of releases in the last 12 months, this supports a substantial inactivity concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is reported. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

All five analyzed action references are unpinned, and one workflow grants top-level write permissions; both weaken build reproducibility and least-privilege hygiene. The audit analyzed both workflows fully and found no untrusted checkout, injection, or high-severity finding.