openpesa/laravel-pesa

Release historycaution

The latest release was over four years ago, with no releases in the last 12 months. The package had five releases early in its history, but the prolonged release gap raises maintenance risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project whose development has substantially slowed.

Workflow auditcaution

All 11 analyzed action references are unpinned, and the audit found high-confidence bot-condition and unpinned-image issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, which limits the severity.