reiarseni/sanctum-refresh-token

Release historycaution

The package is only 40 days old, with four releases clustered within about six hours and no demonstrated longer-term release cadence. This limits maturity evidence despite the recent launch activity.

Repo bus factorcaution

All 29 recent commits came from one contributor, leaving no demonstrated handoff capacity if that contributor becomes unavailable.

Version stabilitycaution

Version v0.2.2 is not marked as a prerelease, but the 0.x major version and the package's very short history indicate an API that may still change substantially.

Workflow auditcaution

All three workflows use read-only permissions and the audit found no high- or medium-confidence findings, but all 14 analyzed action references are unpinned. That weakens build reproducibility and update safety.