soyhuce/laravel-testing

Release historycaution

The package is mature at over four years old with 28 releases, but only one release in the last 12 months indicates a slower maintenance cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which is a meaningful sign of currently quiet development.

Workflow auditcaution

All workflows were analyzed, but every action reference is unpinned and the audit found high-confidence bot-condition and unpinned-container-image findings. The pull_request_target workflow has no untrusted checkout or script injection, so these are workflow hygiene concerns rather than a severe standalone risk.