weldist/spatie-medialibrary-media-hasher

Release historycaution

The package is only 0 days old with two releases published within roughly 31 minutes, so it has not established a sustained release track record.

Repo commit activitycaution

There were no commits and no active maintainers in the previous three months, but the repository and package are newly created, so this is limited evidence of abandonment rather than a severe warning.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which reduces transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings. However, its one action use is unpinned, so that dependency can change without a fixed reference.