thekiharani/laravel-aria

Release historycaution

The package was published today with only two releases, about 1 hour and 13 minutes apart. This is consistent with a new project but provides almost no evidence of sustained maintenance.

Repo commit activitycaution

There have been no commits in the last three months and no active maintainers reported for that period, although the repository was pushed recently and two pull requests were merged this month. Because the project was published today, the lack of historical activity is meaningful but not evidence of abandonment yet.

Security policycaution

The linked repository has no security policy. That is a transparency gap for a package handling conversations, retrieval, spending, and PII masking, even though the repository is very new.

Version stabilitycaution

Version v0.1.1 is not a stable major release, so its API and behavior may still change substantially. No prerelease tag is used, which provides a small counterpoint but does not remove the early-stage risk.

Workflow auditcaution

The workflow audit completed cleanly with no injection or high-confidence security findings, and its job-level permissions are scoped. All four analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene.