buckhamduffy/laravel-expressions

Repo package mentiondanger

The repository name differs from the package name, and its README does not mention the package, so ownership of the published artifact is less transparent. The matching registry and repository owner provides some context but does not resolve that gap.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers over the last 3 months, which weakens evidence of ongoing maintenance. A release was published during the broader observed period, so this is a maintenance concern rather than abandonment by itself.

Security policycaution

No security policy was found in the repository, reducing transparency for vulnerability reporting and response. Repository security scanning is present, which partly compensates for the missing policy.

Workflow auditcaution

All 18 analyzed action references are unpinned, and one workflow grants top-level write permissions. The audit analyzed all 9 workflows and found no untrusted checkouts, injection sinks, or other fired findings, limiting the risk to build hygiene.