byrcsc/laravel-data-sync

Release historycaution

The package is only 48 days old with two releases, so its long-term maintenance pattern is not established. The recent release and stable v1.0.0 status provide some positive evidence but do not offset the short history entirely.

Repo bus factorcaution

One contributor made all 22 commits in the last three months, creating a concentrated maintenance risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo issue activitycaution

There are no open issues or pull requests and no recorded activity in the last month. This is not evidence of abandonment by itself, but it provides little independent evidence of community maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little evidence of external adoption. Popularity is supporting evidence rather than a verdict, and the package's short age makes this unsurprising.

Workflow auditcaution

All three workflows were analyzed with no audit findings or untrusted checkout and script-injection sinks. However, all 11 action references are unpinned, and one workflow has top-level write permissions, which weakens reproducibility and token hygiene without creating a severe risk on the evidence provided.