romanzipp/laravel-projectable-aggregates

Release historycaution

The package has only three releases and none in the last 12 months; the latest release was about 18 months ago, indicating limited recent maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with a project whose maintenance has gone quiet since March 2025.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

All seven analyzed action references are unpinned, which weakens build reproducibility and action supply-chain hygiene. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings.