sdpayhub/laravel-wraith

Project backingcaution

The repository is owned by an individual account rather than an organization, so continuity depends more directly on the current maintainer; recent two-person activity partly offsets that concern.

Release historycaution

The package is only 55 days old with four releases, and releases are clustered very closely, so long-term maintenance and release discipline remain unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported, leaving a modest gap in automated security hygiene.

Version stabilitycaution

Version v0.3.0 is not yet at a stable major release, which leaves compatibility and API maturity less established than a mature 1.x package.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned, weakening build reproducibility.