simonhamp/laravel-nova-csv-import

Release historycaution

The project has existed since April 2019 with 21 releases, but only one release appeared in the last 12 months. The recent release provides some evidence of maintenance, while the slower current cadence warrants caution.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although a release occurred within the broader period, the current lack of repository activity raises abandonment risk.

Security policycaution

The repository has no security policy. This does not show a vulnerability, but it reduces transparency about how security reports are handled.

Version stabilitycaution

v0.8.0 is a stable release rather than a prerelease, but the package remains below a stable major version. Consumers should expect more compatibility changes than with a mature 1.x package.

Workflow auditcaution

Both analyzed workflows completed without dangerous triggers, untrusted checkouts, or audit findings, but all two action references are unpinned. The missing top-level permissions blocks are acceptable on their own, so this is a limited reproducibility and supply-chain hygiene concern.