chiiya/laravel-utilities

Project backingcaution

The repository is owned by the same individual namespace as the package, but the owner type is User rather than an organization, so there is no organizational handoff capacity shown.

Repo bus factorcaution

All recent commits came from one contributor, so maintenance depends heavily on a single person and has little demonstrated redundancy.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer; this is evidence of limited recent development despite the recent release.

Workflow auditcaution

All three workflows were analyzed, but all eight action references are unpinned. The audit also found a high-confidence bot-conditions issue and one workflow combines pull_request_target with top-level write permissions; no untrusted checkout or script injection was found.