renoki-co/laravel-exporter-contracts

Release historycaution

The package has had 10 releases since September 2021, but none in the last 12 months; the latest registry release was November 2022, indicating stale publishing activity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite a recent repository push date elsewhere in the metadata.

Repo issue activitycaution

There were no new or closed issues or merged pull requests in the last month, although three pull requests remain open; this provides limited evidence of active project work.

Security policycaution

The repository has no published security policy, leaving disclosure and response expectations unclear for a package used in application infrastructure.

Workflow auditcaution

All four analyzed action references are unpinned, which weakens build reproducibility. The reported cache-poisoning finding has low confidence, so it is treated as hygiene rather than a severe risk.