nunomaduro/laravel-code-analyse

Registry deprecationdanger

Packagist marks the entire package as abandoned and names `nunomaduro/larastan` as the replacement, so this release carries a real adoption and continuity concern despite the active underlying project.

Repo bus factorcaution

One contributor made about 74% of recent commits, which is concentrated, but 11 contributors were active and the repository is organization-owned, providing some handoff capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent even though the active repository appears to contain the package's source tree.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented and reducing transparency somewhat.

Workflow auditcaution

All 5 workflows were analyzed with no audit findings or untrusted-code sinks, but all 15 action references are unpinned, weakening build reproducibility and action supply-chain hygiene.