dragon-code/laravel-model-settings

Repo bus factorcaution

All 128 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving meaningful concentration risk.

Security policycaution

No repository security policy was found, leaving reporting and disclosure guidance less transparent for a package intended for application integration.

Workflow auditcaution

All eight workflows were analyzed with no untrusted checkout or script-injection findings, but 13 of 25 action references are unpinned and a low-confidence cache-poisoning warning was reported; this is workflow hygiene caution, not a severe standalone risk.