mindtwo/laravel-translatable

Repo bus factorcaution

All 3 recent commits came from one contributor, creating a concentrated maintenance path. The organization-owned project provides some compensation but does not remove the contributor-dependence concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a dependency package, this is a meaningful transparency and maintenance gap, though not a severe risk by itself.

Security policycaution

The repository has no security policy. This weakens the project's disclosure and response transparency, but does not by itself indicate that the release is unsafe to adopt.

Workflow auditcaution

All 4 workflows were analyzed without high-confidence audit findings or untrusted checkouts, but all 11 action references are unpinned and 2 workflows grant top-level write permissions. These are workflow hygiene concerns, not severe risks on their own.