zufarmarwah/laravel-performance-guard

Maintainerscaution

One registry maintainer is publishing the package. The linked repository is user-owned rather than organization-backed, so there is limited visible publishing capacity to offset that narrow base.

Release historycaution

All three releases arrived within minutes on the same day, with no later releases over the following 227 days. This shows an initial burst but little evidence of sustained release maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful abandonment concern for a package released 227 days ago.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all six action references are unpinned. That leaves routine build inputs exposed to upstream changes.