toneflix-code/laravel-dbconfig

Registry deprecationdanger

Packagist marks the entire package as abandoned and provides toneflix/laravel-dbconfig as its replacement. This is a direct adoption risk even though the assessed release is stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance and adds abandonment risk.

Workflow auditcaution

All five workflows were analyzed, but all 13 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. These are meaningful workflow-hygiene concerns, although no untrusted checkout or script injection was found.