dogado/mugshot

Dependency profilecaution

The package has 11 runtime dependencies, including Laravel, Sanctum, Browsershot, and Sentry; this is a meaningful dependency surface but is consistent with the service's web, database, and browser-rendering roles.

Repo bus factorcaution

One contributor made all commits in the last three months, creating a concentrated maintenance dependency; organization ownership provides some handoff capacity but does not remove the thin recent activity.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent development activity even though the release itself is recent.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected, leaving a modest assurance gap for a package with application and browser-rendering dependencies.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.