padosoft/laravel-invitations-admin

Release historycaution

The package is young at 90 days old with only two releases, and both were published close together. This limits evidence of long-term maintenance, though repository activity provides some compensation.

Repo toolingcaution

A Composer build tool is used, but no security scanning tools were detected. The missing scanning is a modest process gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This reduces disclosure transparency for a package that provides an administrative interface, although the other project evidence indicates active development.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no dangerous triggers, untrusted checkouts, injection issues, or other findings. However, all 8 action references are unpinned, leaving a reproducibility and dependency-hygiene gap.