voltra/laravel-export

Release historycaution

The package has 32 releases over about 13 months and five releases in the last year, but the median interval is 0 days, indicating bursty rather than consistently demonstrated maintenance.

Repo commit activitycaution

No commits and no active maintainers were observed in the last 3 months, which weakens confidence that defects and compatibility changes will be addressed promptly.

Repo popularitycaution

The repository has only 1 star, no forks, and no watchers, giving little independent evidence of broad review or community support.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 10 analyzed action references are unpinned, and a high-confidence bot-conditions finding reports potentially spoofable actor checks in the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection finding, so this is a hygiene and workflow-integrity concern rather than a severe standalone risk.