ensi/laravel-phprdkafka-consumer

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. The recent 2.0.8 release and broader release history partly offset this, but the pause is a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap rather than a severe concern because tests and workflow auditing are present.

Workflow auditcaution

Both workflows were analyzed and had no untrusted checkout or script-injection findings, but the audit found a high-confidence unpinned container image and all four action references are unpinned. This weakens build reproducibility and supply-chain hygiene.