vpratfr/laravel-google-fonts

Release historycaution

The package is young at 157 days and has 16 releases, all within the last 12 months, but those releases were concentrated in a short burst. This shows initial activity without yet demonstrating long-term maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. For a package released only months ago, this is a meaningful maintenance concern, although the release history shows earlier activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it does not by itself indicate abandonment.

Workflow auditcaution

All seven analyzed action references are unpinned, and the audit found a high-confidence unpinned container image in php-cs-fixer.yml. The workflows have no dangerous untrusted triggers or script-injection findings, so this is a build-hygiene caution rather than a severe risk.