zarulizham/laravel-openwa

Release historycaution

The package is only 50 days old, with all three releases published within roughly 42 minutes. That shows initial activity but provides little evidence of sustained maintenance yet.

Repo bus factorcaution

Two contributors are active, but the leading contributor made 7 of 9 recent commits. That concentration leaves maintenance capacity somewhat dependent on one person.

Security policycaution

The repository has no SECURITY.md or other declared security policy. This limits transparency for reporting and handling security issues.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions. The pull_request_target workflow has no untrusted checkout or script-injection finding, so this is workflow hygiene caution rather than a severe risk.