imsus/laravel-imgproxy

Project backingcaution

The registry namespace and repository owner match, but ownership is an individual account rather than an organization, so there is no organizational handoff evidence to offset the concentrated contributor base.

Repo bus factorcaution

All 43 recent commits came from one contributor, creating a meaningful continuity risk even though the project is actively maintained.

Workflow auditcaution

All three workflows were analyzed successfully, use no unpinned actions, and have no reported audit findings. Two workflows grant top-level write permissions, which is a mild permissions-hygiene caveat, but no untrusted trigger or sink was found.