devdavido/laravel-reporto

Maintainerscaution

Only one registry account has publishing access. The repository is owned by the same individual rather than an organization, so the narrow maintainer base leaves limited visible redundancy.

Release historycaution

The project has existed for about 8 years and has 12 releases, but only one release appeared in the last 12 months, indicating a slow maintenance cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the repository was pushed about 2 months ago, the absence of recent commit activity is a meaningful maintenance concern.

Security policycaution

No repository security policy was found. This is a transparency gap for a package that processes browser error reports, though the repository does use Dependabot and security scanning.

Token permissionscaution

The workflow lacks top-level token permissions and relies on job-level permissions only, so its least-privilege configuration is less explicit than ideal.