omarchouman/lara-util-x

Maintainerscaution

Only one registry publishing account is listed, which limits publishing redundancy, but the linked repository has two active contributors and is user-owned rather than organization-backed.

Repo bus factorcaution

Two contributors were active recently, with the leading contributor responsible for 75% of commits; this is some concentration but not a single-contributor project.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated vulnerability monitoring unconfirmed.

Security policycaution

The repository has no SECURITY.md or other detected security policy, so the process for reporting and handling vulnerabilities is not documented.

Token permissionscaution

The only workflow does not declare top-level token permissions. No write permissions were observed, but explicitly restricting permissions would provide stronger workflow hygiene.