outerweb/settings

The package has clear documentation, tests in the repository, a matching source project, and regular releases. Maintenance has paused for about three months, while workflow checks need attention because one high-confidence bot-condition finding and universally unpinned actions weaken release hygiene.

Latest v2.0.3

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Workflow audit

All 9 analyzed action references are unpinned, and a high-confidence bot-conditions finding says the Dependabot auto-merge workflow may accept spoofable actor context. One workflow also has a pull_request_target trigger with write permissions, so the release automation needs attention.

Lifecycle scripts

A post-autoload-dump install script is present. This is an additional installation-time behavior, but the provided signal does not show it is unsafe or unusually broad.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance activity has paused despite the recent release history.

Repo issue activity

There are no open issues and four open pull requests, but no issues or pull requests were merged in the last month; this offers limited evidence of current responsiveness.

Security policy

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it does not by itself show abandonment.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Outerweb

Direct Dependencies

Dependency	Last Release	Score
illuminate/support Version ^11.0\|\|^12.0\|\|^13.0	—	—
illuminate/database Version ^11.0\|\|^12.0\|\|^13.0	—	—
illuminate/contracts Version ^11.0\|\|^12.0\|\|^13.0	—	—
spatie/laravel-package-tools Version ^1.16	—	—