oilstone/laravel-webhook-client

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption risk because the registry explicitly signals that ongoing support should not be expected.

Release historydanger

The package has had 19 releases but none in the last 12 months; its latest release was in May 2020, more than six years ago. The historically regular early cadence does not compensate for the prolonged release gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. This materially increases abandonment risk.

Security policycaution

The repository has no security policy. This weakens the project's documented process for receiving and handling vulnerability reports, though it is secondary to the maintenance evidence.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted checkout paths. However, all three action references are unpinned, leaving avoidable build reproducibility and action-change risk.