it-can/laravel-helpers

Repo bus factorcaution

One contributor made all recent commits, creating a concentrated maintenance dependency. The repository is user-owned rather than organization-owned, so there is no provided backing evidence to offset that concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months. Recent work exists, but the low volume provides limited evidence of sustained maintenance capacity.

Security policycaution

The repository has no security policy. This is a transparency gap for a Laravel helper library that includes encryption, middleware, and other application-facing functionality.

Workflow auditcaution

All seven analyzed action references are unpinned, reducing build reproducibility and increasing exposure to changing action code. One workflow also grants top-level write permissions, though the audit found no untrusted checkout, script injection, or other high-confidence findings.