privateevent/laravel

Release historycaution

The package is only 131 days old and has just two releases, both published within about two hours. That is too little history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. For a package only a few months old, this is a meaningful warning about follow-up maintenance.

Security policycaution

The repository has no security policy. This is a transparency and reporting gap, though it is not by itself evidence that the package is unsafe.

Version stabilitycaution

Version v0.1.1 is not a stable-major release, although it is not marked as a prerelease. The early version line increases compatibility uncertainty for adopters.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, which leaves the workflow exposed to changing upstream action content.