anourvalar/eloquent-serialize

Repo bus factorcaution

All 4 recent commits came from one contributor, creating a genuine single-maintainer continuity risk; the repository is user-owned rather than organization-backed, so there is no provided organizational compensation.

Repo commit activitycaution

The repository recorded 4 commits in the last 3 months, showing recent activity, but all activity came from one active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and maintenance gap rather than evidence of an unsafe release on its own.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Token permissionscaution

The only workflow does not declare top-level token permissions. No write permissions were observed, but explicit least-privilege settings would provide better assurance.