graham-campbell/gitlab

Dependency profilecaution

Nine runtime dependencies create a meaningful maintenance surface for this Laravel bridge, though the profile is not unusually large for its role.

Maintainerscaution

Only one registry account has publish access, which leaves limited publishing redundancy; the linked project is user-owned rather than organization-backed.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, indicating that development activity has currently stalled after the latest release.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

Both workflows were fully analyzed with no injection or high-severity findings, but all 8 action references are unpinned, weakening build reproducibility.