spatie/laravel-translation-loader

Release historycaution

The package has existed for over 9 years with 38 releases, but only one release in the last 12 months. That supports maturity while suggesting a slower maintenance pace.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. That weakens confidence in ongoing maintenance, although the recent push and current release provide some counterevidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest repository-hygiene gap rather than evidence that the package is unsafe to use.

Security policycaution

The repository has no security policy. For a framework integration package, this reduces transparency about how vulnerability reports are handled.

Workflow auditcaution

Both workflows were analyzed completely and have no untrusted checkouts or script injection, but all four action references are unpinned and the audit found a high-confidence unpinned container image. This is a reproducibility and workflow-hygiene concern.