kyc-ai/laravel

Repo bus factorcaution

One contributor made 100% of the one recent commit, leaving maintenance fully concentrated in a single person with no demonstrated handoff capacity.

Repo commit activitycaution

Only one commit was recorded in the past three months, indicating limited recent maintenance activity for a package with a young release history.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected, leaving a modest gap in automated security hygiene.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The workflow audit completed successfully with no untrusted checkout or script-injection findings, but both analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene.