kyzegs/laracord

Repo bus factorcaution

One contributor made all commits during the last 3 months, concentrating maintenance responsibility and increasing continuity risk for a user-owned project.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, so activity is present but limited for a maintained integration library.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unspecified.

Workflow auditcaution

All 14 analyzed GitHub Actions references are unpinned, so builds can change when upstream actions move; one workflow also grants top-level write permissions, though the audit found no untrusted checkout, injection, or high-confidence findings.