opekunov/laravel-centrifugo-broadcaster

Project backingcaution

The registry namespace and repository are owned by the same individual, so the package has coherent ownership but no organizational maintenance buffer. This reinforces the single-contributor concern without indicating abandonment by itself.

Repo bus factorcaution

All recent commits came from one contributor, giving the project a 100% top-contributor share. Because the backing owner is an individual rather than an organization, this creates a real continuity risk.

Repo commit activitycaution

The repository recorded one commit in the last three months from one active maintainer. The recent release offsets the low volume, but the limited activity provides only modest evidence of ongoing maintenance capacity.

Security policycaution

The repository has no published security policy. For a Laravel broadcasting library handling API credentials, this is a minor transparency gap, though it is partly offset by Dependabot and the dedicated security tests shown in the package tree.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 9 analyzed action references are unpinned, which weakens build reproducibility and leaves a supply-chain hygiene gap.