syrian-open-source/laravel-query-helper

Release historycaution

The package has only two releases, with the latest in May 2022 and none in the following four years. The long period without a release materially raises abandonment risk, despite the package remaining undepricated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap. The repository is not archived, but there is no recent activity showing ongoing maintenance.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though the package does provide a security contact in its README.

Workflow auditcaution

All 9 action references are unpinned, and the audit found a high-confidence unpinned container image. The workflows have no untrusted checkout or script-injection findings, which limits the concern to build reproducibility and workflow hygiene.