evanschleret/laravel-cors-resolver

Maintainerscaution

Only one registry account has publish access. That is consistent with the linked user-owned project, but it leaves limited publishing redundancy.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-maintainer and single-publisher concentration is not offset by visible organizational backing.

Release historycaution

The package is only 31 days old and has one release, so there is not yet enough history to demonstrate sustained maintenance or compatibility over time.

Repo bus factorcaution

One contributor made all 16 commits in the last three months, creating a real continuity risk if that maintainer becomes unavailable.

Workflow auditcaution

All three workflows were analyzed with no audit findings or untrusted checkouts, but all eight action references are unpinned and two workflows grant top-level write permissions, creating moderate workflow hygiene risk.