aliziodev/laravel-wilayah

Repo bus factorcaution

One contributor made all 2 recent commits, concentrating maintenance responsibility entirely in a single person.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, so recent source activity is limited despite the frequent registry releases.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving the repository with less automated security coverage.

Security policycaution

The repository has no security policy, which reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All 11 action references are unpinned, and the audit found a high-confidence template-injection pattern. The untrusted checkout is in a different workflow from that finding, so this is workflow hygiene rather than a standalone severe risk.