oriceon/laravel-dumper

Release historycaution

There are only two releases over 569 days, with one release in the last 12 months and a median interval of about 378 days. This indicates a slow maintenance cadence, though the latest release is recent.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although the latest release was recent, this leaves current maintenance capacity uncertain.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and assurance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. For a small debugging package this is not severe, but it reduces clarity about vulnerability reporting and response.

Workflow auditcaution

All four workflows were analyzed without untrusted checkouts or injection findings, but all 13 action references are unpinned and one high-confidence medium-severity finding uses an archived action. The workflows lack top-level permissions blocks, which is acceptable on its own but leaves weaker pinning hygiene.