produpress/laravel-actito

Release historydanger

The latest release was published nearly three years ago, with no releases in the last 12 months. Its earlier nine-release history shows initial activity but does not offset the prolonged release gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with an inactive project and increasing abandonment risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while one issue and two pull requests remain open. This supports the lack of current maintenance activity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. Dependabot is present, but it does not replace a documented reporting process.

Workflow auditcaution

All eight analyzed action references are unpinned, and the audit found a high-confidence unpinned container image plus a bot-condition issue. The pull request target workflow has no untrusted checkout or script-injection finding, which limits the concern to workflow hygiene.