rapira/laravel

Release historycaution

The package is less than one day old with only two releases, both published within about 10 hours. This provides too little history to demonstrate sustained maintenance, though the rapid second release shows active initial work.

Repo commit activitycaution

The repository reports zero commits and zero active maintainers in the last three months, but the package itself is only about 10 hours old. This limits evidence of durable maintenance rather than proving abandonment.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, though it is less serious for a brand-new package with no other security-policy evidence.

Version stabilitycaution

Version 0.1.1 is not a stable major release, indicating an early-stage API and greater compatibility risk for adopters.

Workflow auditcaution

All four workflows were analyzed with no audit findings, untrusted checkouts, or script injections. However, all nine action references are unpinned and one workflow grants top-level write permissions, creating workflow-reproducibility and token-scope hygiene concerns without an observed exploit path.