artisan-share/laravel

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not visibly offset by broader organizational backing.

Release historycaution

The package is only 49 days old and has four releases, all clustered on the same day, so there is too little history to demonstrate sustained maintenance.

Repo bus factorcaution

All 17 recent commits came from one contributor, leaving maintenance dependent on a single person and increasing continuity risk.

Version stabilitycaution

The release is not marked prerelease, but it remains on the 0.x major line, indicating an API and maturity profile that may still change substantially.

Workflow auditcaution

All 23 analyzed action references are unpinned, and two workflows grant top-level write permissions; the release workflow also has low-confidence cache-poisoning findings. These are build-hygiene concerns, while the cache findings are not strong evidence on their own.