phattarachai/db-snapshot-sync-laravel

Maintainerscaution

Only one registry publishing maintainer is listed. That is a modest publishing-resilience concern, though repository activity shows a second active contributor.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so there is no organizational backing to offset the single registry maintainer; the second active contributor still helps.

Release historycaution

The package is only 62 days old, but it has 13 releases in that period with a median interval of about 1.3 days, showing active iteration rather than abandonment.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is no public adoption signal to support maturity; this is tempered by the package's very recent creation.

Workflow auditcaution

All five workflows were analyzed successfully with no audit findings, no untrusted checkouts, and read-only permissions in four workflows. However, all nine action references are unpinned and one workflow has top-level write permissions, creating a supply-chain hygiene concern.