nunomaduro/laravel-desktop-notifier

Repo bus factorcaution

One contributor holds 100% of commits in the last three months. This creates meaningful handoff and continuity risk for a user-owned project.

Repo commit activitycaution

Only one commit was recorded in the last three months and it came from one active maintainer. Recent release activity compensates for this partly, but the short-term maintenance signal is thin.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. That weakens the documented process for reporting and handling vulnerabilities, although it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, leaving a modest reproducibility and supply-chain hygiene gap.