impruthvi/agent-detector-laravel

Project backingcaution

The registry namespace and repository owner match, providing direct ownership alignment. The owner is an individual account, so the project has a relatively narrow visible backing base.

Release historycaution

This package is 144 days old but has only one release, so there is little evidence yet of sustained release maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers during the last three months. For a package released only once, that is a meaningful warning about ongoing maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing security automation is a maintenance and transparency gap, though it is not by itself evidence of an unsafe package.

Token permissionscaution

Three workflows lack top-level token permissions and one workflow requests top-level write access. This is weaker CI privilege hygiene and increases repository automation risk.