vinkas/cda-server-laravel-fortify

Release historycaution

The package has had no release in about 1 year and 10 months, with zero releases in the last 12 months after three releases clustered at launch. This materially raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but observed maintenance is currently absent.

Security policycaution

No repository security policy was found. This is a transparency gap, but it is secondary to the stronger maintenance evidence and does not make the release unfit by itself.

Workflow auditcaution

The single workflow uses read-only permissions and has no reported dangerous audit findings, but all 3 analyzed action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.