vortech/laravel-stash

Release historycaution

This is the package's first release, published today, so there is no release history or cadence to demonstrate sustained maintenance. That is a meaningful maturity gap, but not evidence of abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Because the repository and release are both brand new, this is unproven maintenance capacity rather than clear abandonment.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and assurance gap for a new package.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The package's otherwise clear documentation provides only partial compensation.

Workflow auditcaution

All three workflows use read-only permissions and the audit found no injection or high-confidence dangerous findings. However, all 8 action references are unpinned, so workflow dependencies can change without a reviewed commit.