hosmelq/laravel-model-preferences

Maintainerscaution

One registry publishing account creates a thin operational base, so a departure or loss of access could affect release continuity. The matching repository owner provides direct project backing but is still a single-person effort.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release shows the project has not vanished, but this still weakens confidence in ongoing maintenance.

Security policycaution

No repository security policy was found, leaving contributors and users without a documented vulnerability-reporting path.

Workflow auditcaution

All 12 analyzed action references are unpinned, and one workflow has a high-confidence template-injection finding; one workflow also grants top-level write permissions. The audit completed fully and found no untrusted checkout or script-injection trigger, so these are workflow hygiene and release-process risks rather than an automatic adoption blocker.