mehrancodes/laravel-harbor

Repo bus factorcaution

All recent commits came from one contributor, so maintenance depends heavily on a single person despite the repository remaining active.

Repo commit activitycaution

Only 4 commits were made in the last 3 months, which is modest activity for an actively released package and limits evidence of sustained maintenance.

Repo toolingcaution

Composer and Box provide build tooling, but no security-scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, leaving no visible process for reporting and handling security issues.

Workflow auditcaution

All 6 analyzed GitHub Actions references are unpinned, reducing build reproducibility and increasing exposure to upstream action changes. The audit found no untrusted checkout, injection, or high-confidence workflow findings, and all workflows were analyzed.