achyutn/laravel-seo

Dangerous workflowscaution

The only workflow uses pull_request_target with an untrusted checkout, which is a materially risky automation pattern even though no script injection was detected.

Maintainerscaution

Only one registry account has publish access, which creates a publishing continuity concern; the active repository history provides some compensation but does not remove the single-person risk.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated maintainer activity is not backed by an identifiable organizational handoff structure.

Repo bus factorcaution

One contributor made all 11 commits in the last 3 months, leaving the project dependent on a single active maintainer with no demonstrated handoff capacity.

Repo popularitycaution

The repository has only 2 stars and no forks or watchers, so there is little external adoption evidence; popularity is supporting evidence rather than a health verdict.