supereggs/laravel-installer

Release historydanger

Only one release exists, published nearly three years ago, with no releases in the last 12 months. That is strong evidence of an unmaintained package.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, reinforcing the long maintenance gap shown by the release history.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package. This creates a modest ownership and package-source transparency concern.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no sign of an active user or contributor community.

Workflow auditcaution

All 10 analyzed action references are unpinned, and two workflows grant top-level write permissions. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is workflow hygiene rather than a severe risk.