elegantly/laravel-invoices

Maintainerscaution

Only one account has registry publishing access, which creates publishing continuity risk, although repository ownership by an organization provides some backing.

Repo bus factorcaution

One contributor made all 97 commits in the last 3 months. Organization ownership offers some handoff capacity, but no second active contributor is shown, leaving a real continuity concern.

Security policycaution

No repository security policy was found, reducing transparency for vulnerability reporting and response.

Workflow auditcaution

All 11 analyzed action references are unpinned, and the audit found one high-confidence bot-condition issue in a pull_request_target workflow. No untrusted checkout or script-injection sink was found, so this is workflow hygiene risk rather than a severe standalone risk.