ensi/laravel-phprdkafka-producer

Repo bus factorcaution

All recent commit activity came from one contributor, creating a concentrated maintenance risk. Organization backing partly reduces handoff risk, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, which is thin activity, but the recent release history and organization ownership provide some compensation.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

Both workflows were analyzed successfully and have no untrusted checkout or script-injection findings, but one high-confidence audit finding reports an unpinned container image. All four action references are also unpinned, weakening build reproducibility.