larastrict/conventions

Repo bus factorcaution

All three recent commits came from one contributor, creating a meaningful continuity risk; organization backing provides some capacity to hand maintenance off, but no second active contributor is shown.

Repo commit activitycaution

The repository received three commits in the last three months from one active maintainer, showing recent work but a thin maintenance cadence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap for a package that distributes development tooling.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Token permissionscaution

The only workflow does not declare top-level token permissions. No write permissions were observed, but explicit least-privilege settings would provide stronger CI safeguards.