playerarm123/laravel-workflow-kit

Release historycaution

The package is only 1 day old despite 9 releases, with a median interval of about 2 hours; this shows active initial work but provides almost no long-term maintenance history.

Repo commit activitycaution

The repository reports 0 commits and 0 active maintainers in the last 3 months, but the package is only 1 day old; this is weak evidence rather than proof of abandonment, while still leaving maintenance capacity unestablished.

Security policycaution

The repository has no SECURITY policy. This is a transparency and reporting gap, although it is less significant for a package with only 1 day of observable history.

Version stabilitycaution

Version v0.2.7 is not a prerelease, but the 0.x major version signals an immature compatibility track and should be treated as more changeable than a stable-major release.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 6 action references are unpinned, reducing build reproducibility and update safety.