tahsingokalp/laravel-sitemap

Release historycaution

The package has had no releases in about 18 months, despite being only around two and a half years old. This makes ongoing maintenance uncertain, although the release history is not long enough to establish abandonment alone.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but current maintenance capacity is not demonstrated.

Repo popularitycaution

The repository has 1 star, 0 forks, and 0 watchers, providing little independent evidence of adoption or review. Popularity is supporting evidence rather than a decisive health measure, so this is only a mild concern.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented. This is a transparency gap for a dependency, though it does not by itself indicate unsafe code.

Workflow auditcaution

The workflow audit was complete and found no dangerous triggers, sinks, or audit findings, but all 3 action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions remain a modest supply-chain hygiene gap.