lsnepomuceno/laravel-brazilian-ceps

Project backingcaution

The registry namespace and repository are owned by the same individual, providing consistent ownership context; the single-person backing also means limited organizational redundancy.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. Recent releases and a recent push partly offset this, but the current development lull is a maintenance concern.

Security policycaution

The repository has no published security policy. This is a minor transparency gap, although Dependabot scanning provides some compensating security practice.

Workflow auditcaution

The workflow audit completed successfully with read-only permissions, no untrusted checkouts, no injection findings, and no severe audit findings. Both analyzed action references are unpinned, which weakens supply-chain reproducibility but is not severe on its own.