osiemsiedem/laravel-autolink

Release historycaution

The package has existed since 2018 with 20 releases, but only one release occurred in the last 12 months and the median interval is about 134 days. This indicates an established project with a relatively slow current cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and existing tests partly compensate, but current maintenance capacity is uncertain.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a small PHP library this is a hygiene gap, not by itself a severe dependency risk.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although the package's small scope and other repository evidence provide some compensation.

Token permissionscaution

Both workflows omit top-level token permissions, and neither declares explicit read-only permissions. No write permissions were observed, but explicit least-privilege configuration would be clearer.