rpungello/laravel-csv

Release historycaution

The latest registry release was over a year ago, and there were no releases in the last 12 months. This is a meaningful maintenance concern despite the five-release history.

Repo commit activitycaution

The repository shows no commits and no active maintainers in the last three months. That weakens evidence of ongoing maintenance, although the repository is not archived and was pushed recently.

Workflow auditcaution

All 9 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-condition finding affects the Dependabot auto-merge workflow. There are no untrusted checkouts or script-injection findings, which limits the severity.