overtrue/laravel-vote

Maintainerscaution

Only one account has registry publish access, which leaves publishing capacity concentrated. The repository is owned by the same individual, so there is no provided evidence of a broader maintainer base.

Release historycaution

The package has been published since May 2021 with 12 releases, but only one release occurred in the last 12 months and the median interval is about 144 days, indicating a slow maintenance cadence.

Repo commit activitycaution

There were no commits and no active maintainers during the last three months. Although a recent release and repository push provide some compensating evidence, this still weakens confidence in ongoing maintenance.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, reducing reproducibility and supply-chain hygiene.