aaix/laravel-islands

Release historycaution

The package is only 46 days old but has 109 releases, with releases arriving about every 15 minutes. This shows strong activity but an unusually rapid cadence that slightly reduces release-process confidence.

Repo bus factorcaution

Two contributors are active, but the leading contributor made about 60% of recent commits. This is a modest continuity risk for a user-owned project, though the second contributor provides meaningful backup.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools were detected. That leaves the project's automated dependency and code-security checks less transparent.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

Both workflows were analyzed without high- or medium-confidence findings, and no untrusted checkout or script injection was detected. However, all seven action references are unpinned and one workflow grants top-level write permissions, creating avoidable maintenance and token-scope risk.