laragraph/utils

Repo bus factorcaution

One contributor made all commits in the last 3 months. Organizational ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, so activity is present but light; the recent release history partly offsets this concern.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tool was detected, leaving a modest verification gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 14 action references are unpinned, which weakens build reproducibility.