nexxai/laravel-rfc3161

Maintainerscaution

Only one registry publishing account is listed; because the repository is also owned by an individual, there is no organization-backed handoff evidence to offset that concentration.

Repo bus factorcaution

One contributor made all three recent commits, leaving maintenance continuity dependent on a single person.

Repo commit activitycaution

Three commits in the last three months show some ongoing work, although the activity is modest for a young package.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All seven action references are unpinned, and the audit found a medium-confidence high-severity bot-condition issue. The workflow uses job-level permissions and has no untrusted checkout or script-injection finding, which limits but does not remove the CI risk.