veronj/laravel-eloquent-spatial

Release historydanger

The package has had no release in more than four years: all five releases were published on May 30, 2022, with none in the last 12 months. This is strong evidence of abandonment risk despite the stable 1.0.4 version.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its last release. No provided signal shows current maintenance activity to offset this.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this reinforces limited project traction but is not decisive by itself.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting security issues. This is a transparency gap, though it does not by itself show that the package is unsafe.

Workflow auditcaution

All four workflows were analyzed without high-confidence audit findings or untrusted triggers, but all eight action references are unpinned. That creates avoidable build-integrity exposure while the absence of top-level permissions is acceptable on its own.