soyhuce/laravel-eloquent-extended

Release historycaution

The package has existed for about 4 years and has 11 releases, but only one release arrived in the last 12 months with a median interval of about 121 days. That is a modest maintenance cadence rather than evidence of abandonment.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release and repository push provide some compensation, but current development activity is still quiet.

Repo issue activitycaution

There are no new or closed issues in the last month and four open pull requests with no recent merges. This is a mild sign that contribution flow is limited, though it is not evidence of a broken project by itself.

Repo popularitycaution

The repository has one star and no forks, indicating little visible adoption. For a small package this is supporting evidence only, but it provides little external maturity signal.

Workflow auditcaution

All five workflows were analyzed, but all 11 action references are unpinned. The audit also found high-confidence bot-condition and unpinned-container-image issues; the pull-request target workflow has no untrusted checkout or script-injection sink, so these are workflow hygiene concerns rather than severe evidence on their own.