spatie/laravel-cronless-schedule

Release historycaution

The package has existed for about 6 years with 10 releases, but only one release in the last 12 months and a median interval of about 11.6 months indicate a slow cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern despite the recent release and organization backing.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no SECURITY.md or other security policy, reducing clarity for reporting and handling vulnerabilities.

Workflow auditcaution

All three workflows were analyzed with no unsafe triggers, untrusted checkouts, or script-injection findings. However, all seven action references are unpinned and the auditor found a high-confidence unpinned container image, which weakens build reproducibility.