ashiqfardus/laravel-fuzzy-search

Maintainerscaution

Only one account has registry publish access, creating a limited publishing succession path. The matching user-owned repository provides direct ownership context, but does not offset the single-person bus factor completely.

Repo commit activitycaution

The repository has zero commits and zero active maintainers in the last three months. This is a maintenance concern, although the recent release and push show that activity has not stopped permanently.

Repo popularitycaution

Nine stars and one fork indicate a small user and contributor footprint. Popularity is only supporting evidence, so this lowers confidence in community resilience rather than making the package unsafe by itself.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a transparency and assurance gap for a package with database, queue, and indexing functionality.

Token permissionscaution

The only workflow lacks top-level token permissions. Although no write permissions were explicitly requested, explicitly restricting workflow permissions would provide stronger CI hardening.