rylxes/laravel-gdpr

Release historycaution

Only two releases have been published, both on the same day about six months ago, so there is limited evidence of sustained release maintenance. The short history also means abandonment is not yet conclusive.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the past three months, despite the package being used for data handling and compliance workflows. This is a meaningful maintenance concern, though the project is still relatively young.

Repo popularitycaution

The repository has 0 stars and 0 forks, with only 1 watcher, providing little supporting evidence of community use or external review. Low popularity alone does not make a small, otherwise maintained package unhealthy.

Security policycaution

No security policy is present in the repository. For a package handling exports, erasure, consent records, and audit data, this reduces transparency around vulnerability reporting.

Workflow auditcaution

All 5 referenced actions are unpinned, and the release workflow grants top-level write permissions; no dangerous trigger or audit finding was detected. The workflow is complete and has no untrusted checkout or script-injection findings, so this is a hygiene caution rather than a severe risk.