rapkis/laravel-controld

Maintainerscaution

Only one registry account has publish access. Because the repository is user-owned rather than organization-backed, this leaves limited publishing redundancy if that maintainer becomes unavailable.

Release historycaution

The package has five releases since October 2023, but none in the last 12 months; the latest release was in July 2025. This indicates a meaningful maintenance slowdown for a library tied to a changing API.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This is evidence of currently inactive maintenance.

Security policycaution

The linked repository has no security policy file. That weakens the project's disclosure and response transparency, although dependabot scanning provides some compensating security tooling.

Workflow auditcaution

All nine analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection findings, so this is workflow hygiene risk rather than a severe standalone dependency risk.