geekcodev/laravel-max-client

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single-maintainer and concentrated-activity findings are not softened by visible organizational backing.

Repo bus factorcaution

One contributor made 100% of the 21 recent commits, creating a genuine single-person continuity risk; the active release cadence partly offsets but does not remove it.

Repo commit activitycaution

The repository recorded 21 commits in three months, but all activity came from one active maintainer, limiting continuity if that person stops work.

Security policycaution

The repository has no published security policy. This is a transparency gap, although the presence of composer-audit provides some compensating security practice.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, injection findings, or high-severity issues. However, all three action references are unpinned, leaving workflow dependencies less reproducible.