redberryproducts/laravel-crypto-wallet

Release historycaution

The package has made 10 releases, but none in the last 12 months; the latest release was about 20 months ago. This is a meaningful maintenance concern for a young package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance and raises the risk that issues will remain unattended.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, although four pull requests remain open. This suggests limited current project activity.

Security policycaution

The repository has no published security policy. This is a transparency gap for a package handling cryptocurrency wallet integrations, though it does not by itself show abandonment.

Workflow auditcaution

All 9 action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so these are workflow hygiene and maintenance concerns rather than a severe standalone risk.