scriptoshi/laragent

Release historydanger

This package has made only one release, on 19 May 2025, with no releases in the past 12 months and more than a year since publication. That is a substantial maintenance and abandonment concern, though the repository is not archived.

Repo commit activitydanger

There were zero commits and zero active maintainers in the past three months. Combined with the single-release history, this materially increases the risk that defects and compatibility changes will go unaddressed.

Project backingcaution

The package and repository are owned by the same individual account, so the source linkage is coherent. However, there is no organizational backing shown to compensate for the thin maintenance base.

Version stabilitycaution

Version 0.3.2 is not a prerelease, so consumers are not being asked to depend on an explicitly unstable build. Its pre-1.0 major version still limits compatibility expectations, but this is secondary to the lack of ongoing releases.

Workflow auditcaution

All four workflows were analyzed, but all 10 action references are unpinned and three workflows grant top-level write permissions. High-confidence bot-condition and template-injection findings add workflow hygiene risk; no untrusted checkout or script-injection sink was found, so this is not a severe standalone risk.