stancl/laravel-hasmanywithinverse

Release historycaution

The package has had no release in the last 12 months, with the latest release more than three years ago. Its seven releases over a mature multi-year history provide some stability, but the long pause raises maintenance concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release pause. This is a meaningful abandonment risk even though the repository is not archived.

Security policycaution

The repository has no security policy. This is a modest transparency gap for reporting vulnerabilities, but it is not by itself evidence that the package is unsafe or abandoned.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. All four action references are unpinned, which is a supply-chain hygiene weakness but not a severe risk on its own.