railken/eloquent-instance

Release historycaution

The package has four releases since February 2020, but none in the last 12 months and the latest release was in March 2024. This indicates a prolonged maintenance gap for a package assessed in 2026.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the absence of releases in the last year, this is evidence of stalled maintenance.

Repo toolingcaution

Composer build tooling is present, but the repository has no security scanning tools. That limits automated detection of dependency and workflow issues.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All six action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in test.yml. The workflows had no untrusted triggers or script-injection findings, but build reproducibility is weakened.