supaapps/supaapps-laravel-api-kit

Release historycaution

The package has 26 releases but none in the last 12 months, with the latest release in April 2025. That weakens confidence in ongoing maintenance, despite a substantial release history.

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months, consistent with the lack of releases and indicating a meaningful abandonment risk.

Security policycaution

The repository has no security policy, leaving no documented reporting path for vulnerabilities. This is a transparency gap, partly offset by the package's tests and organization-owned repository.

Version stabilitycaution

v0.6.0 is not a stable major release, and 65% of recent releases were prereleases. Consumers should expect a less mature compatibility promise.

Workflow auditcaution

All three analyzed action references are unpinned, and the audit reported a low-confidence cache-poisoning pattern. The workflow has no untrusted checkout or script-injection path, so this is a hygiene concern rather than a severe risk.