marekmiklusek/laravel-starter-kit

Repo bus factorcaution

One contributor made all recent commits, leaving maintenance capacity concentrated in a single person without evidence of a broader active base.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent maintenance despite the strong registry release cadence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability-reporting expectations less clear for a package intended to seed applications.

Workflow auditcaution

The sole workflow was fully analyzed with no audited findings or untrusted triggers, but all seven action references are unpinned, reducing build reproducibility and supply-chain control.