lenius/laravel-ecommerce

Repo bus factorcaution

All five commits in the last three months came from one contributor, leaving a concentrated maintenance path. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 1 watcher, which is weak supporting evidence for maturity and community resilience, although popularity alone does not make a small maintained package unsafe.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and vulnerability-monitoring gap.

Security policycaution

The repository has no SECURITY.md or other detected security policy, making vulnerability reporting and disclosure expectations less transparent.

Token permissionscaution

Neither workflow declares top-level token permissions. No workflow requests top-level write access, and the clean workflow-risk profile limits the practical concern, but explicit least-privilege settings would be stronger.