rylxes/laravel-observability

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is strong evidence of stalled maintenance for a young package.

Release historycaution

The package is only 219 days old and has made 9 releases, but the median interval is about 45 minutes, indicating a concentrated burst rather than established release maturity.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in an observability package that handles application and database telemetry.

Workflow auditcaution

All 8 action references are unpinned, and the audit found two high-confidence template-injection findings in the Packagist update workflow. The workflows were fully analyzed and had no untrusted checkout or script-injection trigger, so this is a serious hygiene concern rather than a standalone critical risk.