weblabnl/laravel-webhook-call

Release historycaution

The package has had 6 releases since December 2022, but none in the last 12 months and its latest registry release was over a year ago, indicating slowed maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of ongoing maintenance despite the repository not being archived.

Workflow auditcaution

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe workflow risk.