tracefast/laravel-ai-observability

Repo commit activitydanger

There were no commits and no active maintainers in the last 3 months, despite the release burst; this is the strongest evidence that maintenance may have paused after launch.

Release historycaution

The package is young at about 3.5 months, but it has nine releases in roughly 18 days, showing an active initial launch period rather than an established maintenance record.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency for an integration that handles application and model telemetry.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected dangerous findings. However, all 3 action references are unpinned, leaving avoidable supply-chain drift risk.