hopheartsceo/laravel-postman-exporter

Repo bus factorcaution

All eight recent commits came from one contributor, leaving maintenance and release continuity dependent on a single person.

Repo popularitycaution

The repository has only two stars and no forks or watchers. Popularity is supporting evidence rather than a verdict, but this provides little external adoption signal.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. This is a modest process gap, not evidence of unsafe code by itself.

Security policycaution

The repository has no SECURITY.md or other security policy, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported dangerous findings, but both of its action references are unpinned, weakening build reproducibility and provenance.