runsystemjsc/laravel-chatops

Release historydanger

Only one release exists, dated over three years ago, with no releases in the last 12 months. That leaves the package's maintenance and compatibility direction unproven.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing prolonged inactivity.

Package scaffoldingcaution

The artifact has a README and changelog, and the exact version has GitHub release notes; the repository also contains tests. However, the README still contains a placeholder description, reducing consumer transparency.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. Dependabot is enabled, which provides some compensating security maintenance coverage.

Workflow auditcaution

All 5 of 5 action references are unpinned, and the audit found high-confidence bot-condition and unpinned-image issues. The pull-request trigger has no untrusted checkout or script-injection sink, so this is a serious hygiene concern rather than an automatic severe workflow risk.