rappasoft/laravel-helpers

Release historycaution

The project is over 8 years old but has only 7 releases, with a median interval of about 17 months. Two releases in the last 12 months provide evidence of recent publishing, partly offsetting the slow historical cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release is a compensating sign, but the current development pause still raises maintenance risk.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. For a small PHP library this is a modest transparency and maintenance-hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. This makes vulnerability reporting and response expectations less clear for dependents.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 4 action references are unpinned. That leaves build inputs less reproducible and increases workflow supply-chain exposure.