whilesmart/eloquent-activities

Release historycaution

This is the package's only release, published about six months ago, so there is little registry evidence of sustained maintenance. The repository's later push provides some compensating project activity but does not establish release continuity.

Repo commit activitycaution

No commits and no active maintainers were observed in the last three months. For a package with only one release, that leaves maintenance continuity uncertain rather than demonstrating abandonment on its own.

Repo toolingcaution

Composer and Make tooling are present, but no security scanning tool was detected. This is a modest transparency and maintenance gap, not a severe risk by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations unclear for consumers and maintainers.

Workflow auditcaution

All four analyzed action references are unpinned, and two workflows grant top-level write permissions. The audit found no untrusted checkout, injection, or high-confidence dangerous finding, so this is workflow hygiene caution rather than a severe risk.