genealabs/laravel-impersonator

Project backingcaution

The package is published under GeneaLabs while its linked repository is owned by an individual account, so the registry maintainer list does not provide strong organizational backing for ongoing development.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although this release was published recently, the lack of recent development activity is a meaningful maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear for a package that handles user impersonation functionality.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings, no untrusted checkout, and no script injection. However, both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.