rockbuzz/lara-memberships

Release historydanger

This package has only one release, published over five years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency expected to track its ecosystem.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no ongoing maintenance.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little supporting evidence of community use or review. Popularity is secondary, but it does not offset the maintenance concerns.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This adds a moderate hygiene concern to an otherwise dormant project.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but its one action use is unpinned. That is a minor supply-chain hygiene weakness, not a severe risk.