ritechoice23/laravel-chat-engine

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational maintenance cushion. This matters alongside the lack of recent commit activity.

Release historycaution

This is a new package, about 9 months old, but it has only one release and no demonstrated release cadence. That limits evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. For a package with only one release, this is meaningful evidence that maintenance may have stalled.

Repo popularitycaution

The repository has 1 star, 0 forks, and 0 watchers. Low popularity is only supporting evidence, but it provides little external evidence of maturity or community support.

Workflow auditcaution

All five workflows were analyzed, but all 12 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. Top-level write permissions in three workflows add further workflow hygiene concern, though no untrusted checkout or script injection was found.