fruitcake/laravel-weasyprint

Repo bus factorcaution

One contributor made all recent commits, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, showing limited recent development activity despite the current release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling is reported. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, which weakens build reproducibility, while the absence of a top-level permissions block is acceptable on its own.