rpungello/laravel-address-formatter

Release historycaution

The package has four releases over about four years, with no releases in the last 12 months and a median interval of about 343 days. This indicates slow maintenance, though not abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance warning, although the repository is not archived and was pushed recently.

Security policycaution

The linked repository has no security policy. This is a transparency gap for reporting vulnerabilities, though dependency scanning through Dependabot provides some compensating security process.

Workflow auditcaution

The audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow, and all nine analyzed action references are unpinned. The pull_request_target workflow has no untrusted checkout or script-injection sink, which limits the severity, but the workflow hygiene still lowers confidence.