astrotomic/laravel-vcard

Repo bus factorcaution

All two recent commits came from one contributor, giving the project a narrow recent contributor base. Organization ownership provides some handoff capacity but does not remove the concentration concern.

Repo commit activitycaution

Two commits were made in the last three months, showing some recent activity, but the pace is light for a maintained library.

Repo issue activitycaution

There are three open issues and three open pull requests, but no issues or pull requests were opened or merged in the last month. This indicates limited recent collaboration, though not abandonment by itself.

Version stabilitycaution

Version 0.8.1 is not a stable major release, but it is not prerelease and recent prerelease share is zero; this is a minor maturity caveat rather than a serious dependency risk.

Workflow auditcaution

Both workflows were fully audited, use read-only permissions, and contain no reported audit findings or untrusted checkouts. However, all four analyzed action references are unpinned, which weakens build reproducibility and supply-chain transparency.