phpsa/laravel-postman

Release historycaution

The latest release was published in April 2024, with no releases in the last 12 months. This indicates materially slowed maintenance, although the repository was pushed more recently.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Together with the stale release history, this raises maintenance and abandonment risk.

Security policycaution

The linked repository has no security policy. This is a modest transparency gap for reporting and handling vulnerabilities, but it is not evidence that the package is unsafe by itself.

Workflow auditcaution

The workflow audit completed successfully and found no dangerous sinks or high-severity findings, but all 3 of 3 action references are unpinned. The lack of a top-level permissions block is acceptable on its own, so the unpinned references are the main hygiene concern.