lambdadigamma/laravel-api-language

Maintainerscaution

Only one registry account has publish access. That is a thin publishing base for a user-owned project and increases continuity risk if that maintainer becomes unavailable.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing to offset the thin maintainer base.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release and push provide some compensation, but the current commit pause still raises maintenance concern.

Workflow auditcaution

All three workflows were analyzed successfully with no untrusted checkout or script-injection findings, but all seven action references are unpinned and the auditor found a high-confidence unpinned container image. This weakens build reproducibility and supply-chain hygiene.