augusl/laravel-lark-logging

Release historycaution

The package has three releases over about 14 months, with only one release in the last 12 months and roughly 6–7 months between typical releases. This indicates a young project with limited release history, but not abandonment by itself.

Repo bus factorcaution

All recent commits come from one contributor, giving the project a bus factor of one. The repository is user-owned rather than organization-owned, so there is no provided backing signal to offset that concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. That shows some recent activity but a thin maintenance cushion for future fixes.

Security policycaution

The repository has no security policy. For a logging integration that handles application output and webhook configuration, this weakens vulnerability-reporting transparency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, so build inputs are less reproducible; the lack of a top-level permissions block is not concerning here because the workflow has no top-level write permissions.