justbetter/laravel-http3earlyhints

Repo bus factorcaution

All 2 recent commits came from one contributor. Organizational ownership provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

The repository recorded 2 commits in the last 3 months, showing recent activity, but the cadence is modest for a package with active releases.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is reported, leaving a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

All 3 workflows were analyzed without dangerous triggers or audit findings, but all 6 action references are unpinned, weakening build reproducibility and update control.