ghostcompiler/laravel-hetzner-cloud

Release historycaution

The package is 103 days old with only one release, so its maintenance track record is not yet established.

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, so current maintenance activity is limited despite the repository remaining active.

Workflow auditcaution

All six analyzed action references are unpinned, and one workflow grants top-level write access; the audit found no untrusted checkout or injection sink, so this is a hygiene caution rather than a severe risk.