romanzipp/laravel-env-normalizer

Release historycaution

The package has eight releases since October 2021, but none in the 12 months before collection; the latest release was in March 2025. This indicates a meaningful maintenance slowdown, though the project is not yet abandoned.

Repo commit activitycaution

There were zero commits and zero active maintainers in the three months before collection. This reinforces the release slowdown and raises abandonment risk, although the repository was updated with the assessed release in March 2025.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for consumers.

Workflow auditcaution

All three workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned, weakening build reproducibility and update integrity.