alexstewartja/laravel-attribute-observer

Maintainerscaution

Registry publishing access is held by one maintainer. The matching user-owned repository and observed release history provide some support, but there is limited apparent backup capacity.

Project backingcaution

The registry namespace and repository are owned by the same individual, so the package has clear ownership, but it does not have organization backing that would broaden maintainer capacity.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. This is a meaningful recent-maintenance gap, although the latest release was published during the measured period.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and assurance gap rather than evidence of abandonment.

Workflow auditcaution

Both workflows were analyzed with no untrusted checkouts, script injection, or broad top-level write permissions. However, the audit found a high-confidence unpinned container image, leaving a concrete workflow supply-chain hygiene concern.