danmahara/laravel-openapi

Release historycaution

The package is less than a day old and has four releases clustered within minutes, so there is not yet enough history to demonstrate sustained maintenance or release stability.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Because the package is less than a day old, this is weak evidence rather than a standalone adoption concern, but it provides no external maturity support yet.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a brand-new package this is a modest transparency gap, not evidence that the code is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Token permissionscaution

The sole GitHub Actions workflow has no top-level token permissions declaration. It has no observed write permissions, but explicitly limiting permissions would provide stronger workflow hygiene.