soyhuce/laravel-rollbar

Release historydanger

The package has had only two releases, with the latest on January 7, 2022 and none in roughly 4 years 8 months. That strongly indicates abandonment risk for a Laravel integration.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, after no observed recent release activity. This is strong evidence that maintenance has stopped rather than merely slowed.

Workflow auditdanger

All seven action references are unpinned, and the auditor found a high-confidence, high-severity unpinned container image in the PHP CS Fixer workflow. The workflows have no untrusted triggers or script-injection findings, but the release automation still has notable reproducibility and supply-chain hygiene risk.

Repo popularitycaution

The repository has zero stars and forks and only three watchers. Popularity alone is not decisive, but these counters provide no supporting evidence of an active user or contributor community alongside the stale activity.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported. This is a secondary concern because the stronger risk comes from the lack of recent maintenance.