bnzo/laravel-fintecture

Dangerous workflowscaution

One workflow uses pull_request_target for automated Dependabot merging. No untrusted checkout or script injection was detected, but this workflow class deserves caution because it can run with elevated repository context.

Maintainerscaution

Only one registry publishing account is listed, which creates some continuity risk for a user-owned project, although the matching source repository shows the package has an identifiable owner.

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is limited evidence of institutional continuity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a meaningful maintenance concern even though a recent push and current releases show some publishing activity.

Repo popularitycaution

The repository has zero stars, forks, and watchers, offering no external adoption evidence; this is a supporting concern rather than proof that a small package is unhealthy.