returnearly/laravel-enums

Release historycaution

The package has five releases over about three years, but none in the last 12 months and the latest release was about 16 months ago. This indicates a meaningful maintenance slowdown for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Together with the inactive release cadence, this raises abandonment risk.

Security policycaution

The repository has no security policy. That reduces transparency for reporting vulnerabilities, although the project does use Dependabot for security scanning.

Workflow auditcaution

All 12 analyzed action references are unpinned, which weakens build reproducibility, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe workflow risk.