wedevbr/mati-laravel

Release historydanger

The package has had no registry release in over five years, despite only five releases overall. This is strong evidence of abandonment risk for a Laravel integration package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no update since April 2021.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the small maintainer base provides limited visible backing for long-term maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified. This is a transparency gap, though it is less serious than the lack of recent maintenance.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or write-wide permissions. However, both action references are unpinned, which is a supply-chain hygiene gap.