admin9/laravel-scramble-extensions

Repo bus factorcaution

All six recent commits came from one contributor, leaving maintenance dependent on a single person; organization ownership provides some handoff capacity but does not remove the concentration risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities, although this is not evidence of a vulnerability itself.

Version stabilitycaution

v0.3.2 is not a prerelease, but the 0.x major version means the package has not reached stable-major maturity and may still introduce compatibility changes.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkout, injection, or auditor findings. However, all four action references are unpinned and one workflow grants top-level write permissions, creating modest reproducibility and token-scope concerns.