ruvelo/laravel-comments

Release historycaution

The package is less than a day old with only two releases, so there is too little history to establish sustained maintenance. The rapid second release provides some evidence of active initial development but does not offset the limited track record.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Because the package is less than a day old, this primarily reflects insufficient history rather than proven abandonment, but it leaves maintenance capacity unestablished.

Workflow auditcaution

All eight analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene. One workflow has top-level write permissions, but there are no untrusted checkouts, script-injection findings, dangerous triggers, or auditor findings to elevate this to a severe risk.