marshmallow/translatable

Dependency profilecaution

The package declares eight runtime dependencies, including Laravel Nova and several related Marshmallow packages. This is a meaningful integration surface, but not excessive for a Nova feature package.

Repo bus factorcaution

All recent repository commits came from one active contributor, creating concentration risk. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it does not by itself indicate abandonment.

Workflow auditcaution

The audit covered the single workflow completely and found no dangerous triggers, injection sinks, or high-severity findings. However, both action references are unpinned, so workflow dependencies are less reproducible.