rockbuzz/lara-activities

Release historycaution

The package has 27 releases since 2019, but none in the last 12 months; its latest release was about 1 year and 2 months ago. This suggests maintenance has slowed, though the long release history provides some maturity evidence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, which is a concrete sign that maintenance has currently stalled. The recent release partially offsets this, but does not remove the concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a maintained application package, that is a modest transparency and upkeep gap.

Security policycaution

The repository has no security policy. This does not make the package unusable, but it leaves vulnerability reporting and response expectations unclear.

Token permissionscaution

The only workflow has no top-level token permissions declared, so its effective permissions are less explicit than preferred. No workflow has declared top-level write access, which limits the severity of this gap.