terpomoj/laravel-encore

Release historydanger

The latest release was in April 2022, with no releases in the last 12 months and only eight releases overall. This is strong evidence that the package is no longer actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Repo popularitycaution

The repository has one star, one fork, and no watchers, providing little evidence of a broad support or review community. Low popularity is supporting caution rather than a verdict by itself.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This is a hygiene gap, not evidence of malicious behavior.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or dangerous trigger sinks, but both of its two action references are unpinned. That weakens build reproducibility and supply-chain hygiene.