trickertreat654/laravel-webshop-starterkit

Release historycaution

The package has only 3 releases, all clustered around its first release, with no releases in the last 12 months and the latest release over 17 months ago. This is meaningful maintenance risk, though the repository is not archived.

Repo popularitycaution

The repository has 0 stars, 1 fork, and 1 watcher, providing little external evidence of adoption or review. Low popularity is only supporting evidence and does not outweigh the matching repository and test coverage.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. That leaves a modest gap in ongoing project hygiene.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, but it is not evidence of abandonment by itself.

Workflow auditcaution

Both workflows were analyzed with no reported audit findings or untrusted triggers, but all 5 action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene concerns rather than severe risks without an untrusted execution path.