elegantly/laravel-pappers

Repo bus factorcaution

All six recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown to reduce the immediate concentration risk.

Repo commit activitycaution

Six commits were made in the last 3 months, with one active maintainer, so development has not stopped. The limited activity leaves less maintenance capacity than a broader project would have.

Security policycaution

The repository has no security policy, which makes vulnerability reporting less transparent for a package that handles external API credentials. This is a modest process gap rather than evidence of abandonment.

Workflow auditcaution

All five workflows were analyzed successfully, but all 11 action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. The pull_request_target workflow had no untrusted checkout or script-injection sink, limiting the severity.