teaminfinitydev/laravel-sms-notify

Project backingcaution

The source repository is owned by an individual account rather than an organization, so the project has limited visible institutional backing.

Release historycaution

This is the only release, published 450 days ago, with no releases in the last 12 months. That limited history makes long-term maintenance harder to establish.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the repository was pushed in October 2025, current maintenance activity is absent.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is not evidence of unsafe code by itself.

Workflow auditcaution

The single workflow was fully analyzed with no injection or untrusted-checkout findings, but all four action references are unpinned. That leaves the build exposed to dependency drift even without a detected workflow exploit.