shiftonelabs/laravel-cascade-deletes

Release historycaution

The package has existed since December 2016 and has seven releases, but its latest release was in December 2024 with no releases in the last 12 months. This indicates a mature but currently inactive release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. That weakens evidence of ongoing maintenance, although the project was updated when version 2.0.2 was published.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and handling expectations undocumented, reducing maintenance transparency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene; the missing top-level permissions block is acceptable on its own.