sebastiaanluca/laravel-boolean-dates

Maintainerscaution

Only one registry account has publish access, leaving little publishing redundancy. Because the project is user-owned rather than organization-backed, this is a meaningful resilience concern.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, indicating a recent pause in development despite the latest release and later repository push.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. The repository does include Dependabot scanning, which provides some compensating security tooling.

Workflow auditcaution

All four analyzed workflow action references are unpinned, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings, so this is a hygiene concern rather than a severe risk.