overtrue/laravel-versionable

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance-capacity concern despite the current release and merged pull request.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance undocumented; this is a transparency gap but not a severe dependency risk.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all four action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.