worksome/laravel-direct-vue-routing

Release historycaution

The package is over three years old but has only five releases, with a median interval of about 344 days and one release in the last 12 months. This indicates a slow maintenance cadence, though v0.1.4 was released recently.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although a recent release exists, the lack of current development activity is a meaningful abandonment warning.

Version stabilitycaution

The release is not marked prerelease, but the package remains below a stable major version at v0.1.4. That increases the chance of compatibility changes compared with a mature 1.x package.

Workflow auditcaution

All three workflows were analyzed, but all nine action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is workflow hygiene risk rather than a severe release risk.