larva/laravel-skel

Repo bus factorcaution

One contributor made all 7 commits in the last 3 months, creating a real continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap for a framework application.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported audit findings. However, all 3 action references are unpinned, reducing build reproducibility and making dependency changes less controlled.