vdhicts/laravel-csr-generator

Release historycaution

The package has seven releases over about 3 years and one release in the last 12 months, with a median interval of about 189 days. This indicates modest, not highly active, maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the current maintenance signal remains thin.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a moderate transparency and assurance gap for a package that handles key and certificate-generation code.

Security policycaution

The repository has no security policy. That weakens the documented process for reporting and handling vulnerabilities, though it does not by itself show an active security issue.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but both of its two action references are unpinned. That leaves CI dependent on mutable action versions and warrants a hygiene caution.