qruto/laravel-wave

Release historycaution

The package has 14 releases over roughly four years, but none in the last 12 months. This is a meaningful maintenance concern, although recent repository activity partly offsets abandonment risk.

Repo issue activitycaution

Only two issues are open and six pull requests are open, with recent issue and pull-request activity. The absence of recent merges is a small unresolved-process concern.

Security policycaution

No repository security policy was found. This is a transparency gap for a package handling live application connections, though it does not by itself indicate unsafe code.

Version stabilitycaution

Version 0.10.1 is not a prerelease and has no recent prerelease history, but the 0.x major version signals a less mature compatibility commitment than a stable major release.

Workflow auditcaution

All 16 action references are unpinned, and the audit reports high-confidence unpinned images plus template-injection and bot-condition findings. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are workflow-hygiene concerns rather than standalone severe risks.