shoket/laravel-shoket

Release historydanger

The package has only four releases, with the latest in May 2022 and none in the last 12 months. That long release gap raises abandonment risk for a payment integration.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with a project that has had little recent maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while two pull requests remain open, providing little evidence of active project response.

Version stabilitycaution

The current release is not a prerelease, but it remains on major version 0, which indicates limited maturity and warrants caution alongside the old release history.

Workflow auditcaution

All 11 analyzed action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are workflow hygiene concerns rather than a standalone critical risk.