grafst/artisan-bug

Maintainerscaution

The registry has one publishing maintainer, and the repository owner is an individual rather than an organization. This creates a limited bus factor, although the repository is correctly linked.

Release historycaution

Only one release exists, published about 2 years and 8 months ago, with none in the last 12 months. That leaves ongoing maintenance uncertain despite the repository remaining available.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is a meaningful maintenance concern for a package with no newer registry release.

Workflow auditcaution

All 6 analyzed action references are unpinned, and two workflows grant top-level write permissions. A high-confidence bot-conditions finding also affects the Dependabot auto-merge workflow; with no untrusted checkout or script injection, this is a hygiene concern rather than a severe risk.