yuges-code/laravel-pinnable

Release historycaution

Only two releases were published, both on June 8, 2025, with no releases in the following 12 months. That limited history and long pause reduce confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured, consistent with the release pause and raising abandonment concerns.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

Both workflows were analyzed successfully and no dangerous audit findings were reported. However, all five action references are unpinned, which weakens build reproducibility and supply-chain hygiene.