henzeb/laravel-typed-collection

Maintainerscaution

Only one account has registry publish access; because the repository is user-owned rather than organization-owned, there is little provided evidence of publishing redundancy.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance capacity concentrated and increasing abandonment or handoff risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no SECURITY.md or other detected security policy, so vulnerability-reporting guidance is missing despite the README providing an email address.

Workflow auditcaution

All five workflow action references are unpinned, and the high-confidence audit found one archived action; these are supply-chain hygiene gaps. The workflow has no untrusted checkout or script-injection findings and no broad top-level write permission.