sustainable-hustle/astrel-laravel

Release historydanger

The package is about five years old, has only four releases, and has had no release in the last 12 months; its latest release was in September 2021. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no updates since September 2021.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The build setup is present, while security assurance is limited.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The absence of security scanning tools reinforces this transparency gap.

Workflow auditcaution

Both workflows were analyzed successfully, but one high-confidence finding reports an unpinned container image and all four action references are unpinned. This weakens build reproducibility and supply-chain hygiene, though it is not severe enough to determine the score alone.