xgenious/xgpagebuilder

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, despite the package having released 10 versions during its first 190 days. This is a meaningful maintenance concern, though the recent release history provides some compensating evidence.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with 1 issue still open. This reinforces the lack of recent visible maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a Laravel package with substantial PHP and frontend code, this is a modest transparency and maintenance gap.

Security policycaution

The linked repository has no security policy. That leaves vulnerability reporting and response expectations undocumented for consumers of an application-facing package.

Workflow auditcaution

The single analyzed workflow gives top-level write permissions and leaves all 5 action references unpinned. No untrusted checkout, script injection, or high-confidence audit finding was reported, so this is a hygiene caution rather than a severe risk.