novius/laravel-linkable

Repo bus factorcaution

One contributor made all 4 recent commits. Concentration is a maintenance concern, although the repository is owned by an organization that can provide some handoff capacity.

Repo commit activitycaution

The repository recorded 4 commits in the last 3 months and had one active maintainer, indicating current activity but a narrow maintenance base.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and process gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and disclosure expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or high-confidence audit findings. However, all 9 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.