patrickcurl/laravel-computed-columns

Release historydanger

The latest release was published on October 2, 2022, with no releases in the following 12 months and only four releases overall. This is strong evidence of stalled maintenance for a dependency released nearly four years ago.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this materially raises abandonment risk.

Security policycaution

No security policy is present in the repository. That is a transparency gap for a package intended to be integrated into applications, though it is less serious than the maintenance evidence.

Workflow auditcaution

The audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow, all nine analyzed action references unpinned, and one workflow with broad top-level write permissions; one of five workflows also failed analysis. The pull_request_target trigger had no untrusted checkout or script-injection sink, limiting the severity.