omisai/laravel-billingo

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have paused for this young package.

Repo popularitycaution

The repository has one star and no forks or watchers; popularity is not required for a small package, but this provides little independent evidence of broad adoption.

Workflow auditcaution

All three analyzed action references are unpinned, and the release workflow has a high-confidence template-injection finding plus top-level write permissions; no untrusted trigger or checkout sink was observed, so this is a hygiene concern rather than a severe workflow risk.