astrotomic/laravel-github-sponsors

Repo bus factorcaution

One contributor made all recent commits, concentrating maintenance responsibility; organization backing provides some ability to hand work off but does not remove the concentration.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, indicating limited recent development activity despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 4 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.