thefreshuk/pubsub-laravel

Dependency profilecaution

Ten runtime dependencies make the package rely on a relatively broad dependency surface, which adds maintenance exposure, but the profile is consistent with a Laravel integration package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence of continuing maintenance despite the recent push and release-history evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a security-process gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Version stabilitycaution

The assessed release is marked stable and not a prerelease, but the reported latest version is v2.0.2 while the assessed version is v3.3.0, creating some release metadata uncertainty.