ashrafic/laravel-ai-orbit

Release historycaution

The package is only 118 days old but has 15 releases, with the latest published today and a median interval of about 6 hours. This shows active iteration, though the short history leaves limited evidence of long-term stability.

Repo bus factorcaution

One contributor made 100% of the two commits in the last three months. Because the repository is organization-owned, maintenance can potentially be handed off, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, all from one active maintainer. The recent release activity partly offsets this, but the repository provides limited evidence of sustained engineering activity.

Security policycaution

The repository has no SECURITY.md or other declared security policy. This is a transparency gap for a package that adds application-facing observability and playground functionality.

Token permissionscaution

Three workflows omit top-level token permissions and one declares top-level write access. Although no dangerous workflow behavior was detected, the permissions configuration is less restrictive than ideal.