mrkoopie/laravel-ai-harness

Repo bus factorcaution

Two contributors are active, but one accounts for 27 of 31 recent commits, leaving maintenance substantially dependent on a single person.

Security policycaution

The repository has no security policy. This is a transparency gap, although the active repository and clean workflow audit provide some compensating evidence.

Version stabilitycaution

This is a non-prerelease 0.5.1 release, but the major version is still below 1.0, so compatibility expectations are less established than for a stable major release.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings. However, all four referenced actions are unpinned, leaving avoidable build-integrity risk.