ruvelo/laravel-inbox

Release historycaution

The package is brand new, released only twice on the same day, so there is not enough history to demonstrate sustained maintenance or release stability.

Repo commit activitycaution

No commits or active maintainers were observed in the last three months. Because the package is only hours old, this is more a lack of maintenance evidence than proof of abandonment, but it still limits confidence.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak supporting evidence rather than a verdict, but it provides no external maturity signal for this newly published package.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts, injection findings, or high-severity audit results. However, all 8 action references are unpinned and one workflow grants top-level write permissions, creating a manageable automation-hygiene caution.