offline-agency/spid-laravel-trentino

Release historycaution

The package is only 0 days old, with four releases published within the same day. That shows active initial publishing but provides too little history to establish durable maintenance.

Repo commit activitycaution

The repository records 0 commits and 0 active maintainers in the last 3 months, although the release was pushed shortly before collection and recent pull requests show activity. This leaves maintenance capacity insufficiently demonstrated.

Workflow auditcaution

All 12 of 12 analyzed action references are unpinned, which weakens build reproducibility. The workflows use read-only permissions, have no untrusted checkouts or script-injection findings, and the audit completed fully, limiting this to a hygiene caution.