omisai/laravel-countries

Release historycaution

The package is 179 days old but has only one release, so there is little release history to establish long-term maintenance. The linked repository was pushed recently, which provides some compensating evidence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the repository had a push within that period, the lack of observed commit activity weakens confidence in ongoing maintenance.

Workflow auditcaution

Both workflows were analyzed successfully, but all two action references are unpinned, one workflow grants top-level write permissions, and a high-confidence template-injection finding affects the release workflow. The audit found no untrusted checkout or script-injection sink, so these remain workflow hygiene and exposure concerns rather than a standalone severe risk.