nietocjr/laravel-kintone-connect

Release historycaution

The package is about two years old but has only four releases, with one release in the last 12 months and a median interval of about 227 days. This indicates a slow maintenance cadence rather than abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the slow release history, this raises concern about current maintenance capacity.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is not severe enough to make the release unfit on its own.

Version stabilitycaution

Version 0.3.0 is not a stable major release, so the public API may still change. It is not marked prerelease, which partly offsets the maturity concern.

Workflow auditcaution

All three workflows were analyzed without high- or medium-severity findings, and no untrusted checkouts or script injection were detected. However, all eight action references are unpinned and one workflow grants top-level write permissions, creating moderate workflow hygiene risk.