fidum/laravel-schedule-queue-command

Maintainerscaution

Only one account has registry publish access. That is normal for a small organization-backed project, but it still leaves publishing dependent on one person.

Release historycaution

The package has existed for about four years, but it has only seven releases, one in the last 12 months, and a median release interval of about nine months. This indicates a slower maintenance cadence, though not abandonment by itself.

Repo bus factorcaution

All two recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown in this period.

Security policycaution

No repository security policy was found, leaving the project's vulnerability-reporting process unclear.

Workflow auditcaution

All five workflows were analyzed without failures and no untrusted checkout or script-injection sinks were found. However, all 12 action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding remains, creating workflow supply-chain hygiene concerns.