spatie/laravel-interacts-with-payload

Release historycaution

The package has existed since April 2021 with nine releases, but its latest release was in March 2025 and it had no releases in the last 12 months, indicating slowing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured, which is a meaningful maintenance concern when combined with the absence of releases in the last year.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected; this is a modest transparency and hygiene gap, not evidence of unsafe behavior by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a minor transparency gap for a maintained package.

Workflow auditcaution

The audit is incomplete because one of three workflows failed analysis. Among analyzed workflows, all five action references are unpinned and a high-confidence finding reports an unpinned container image, weakening build reproducibility and supply-chain hygiene.