colopl/laravel-spanner

Repo bus factorcaution

One contributor made all five commits in the last three months, giving the project a current bus factor of one. Organization backing provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

The repository recorded five commits in the last three months, so maintenance has not stopped. However, all recent activity is concentrated in a single active maintainer, leaving limited visible redundancy.

Security policycaution

The repository has no SECURITY.md or other detected security policy. That is a transparency gap for reporting vulnerabilities, although it does not by itself indicate abandonment.

Version stabilitycaution

v12.0.0-beta2 is explicitly a prerelease, so consumers should expect API or behavior changes even though prereleases make up only 10% of recent versions.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings, no untrusted checkouts, and no script-injection paths; one workflow scopes permissions at job level. All three referenced actions are unpinned, however, so their fetched revisions are not fixed for reproducible builds.