shanginn/laravel-openapi

Release historydanger

This package has only one release, published about four years ago, with no releases in the last 12 months. That strongly increases abandonment risk for a production dependency.

Repo commit activitydanger

There were no commits or active maintainers in the last three months, consistent with the roughly four-year-old last push. This is a substantial maintenance and abandonment concern.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of a broad active user base.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That weakens transparency around ongoing dependency and code-health checks.

Workflow auditcaution

The audit found no dangerous workflow findings, but both analyzed action references are unpinned and one workflow file failed analysis. This is a meaningful reproducibility and audit-coverage weakness, not a severe workflow threat.