laravel-enso/avatars

Dependency profilecaution

Seven runtime dependencies show meaningful coupling to the Laravel Enso ecosystem, but they are consistent with the package's documented avatar, file, migration, and image-processing functionality.

Repo bus factorcaution

All two recent commits came from one contributor, creating a genuine concentration risk. The organization-owned repository provides some maintenance handoff capacity, so this is caution rather than danger.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy, which makes vulnerability reporting less explicit, although the active organization backing and recent release history provide compensating maintenance evidence.