rokde/laravel-pergament

Dependency profilecaution

The package has 16 runtime dependencies, which is a meaningful integration surface for a Laravel package but not by itself evidence of abandonment or unsafe maintenance.

Project backingcaution

The registry namespace and repository are owned by the same individual account, so the package has direct ownership alignment but no organizational backing signal.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the package has a recent release history, this is a material maintenance pause for a young project.

Repo issue activitycaution

There were three open issues and seven open pull requests, with no new or closed issues or pull requests in the last month; this suggests unresolved work and limited recent interaction.

Workflow auditcaution

All six workflows were analyzed and all action references are pinned, with no untrusted checkout or script-injection findings. High-confidence bot-condition and template-injection findings, plus top-level write permissions in three workflows, leave a workflow-hygiene caution, though no severe untrusted-code sink was observed.