rebing/graphql-laravel

Repo bus factorcaution

One contributor made all 6 commits in the last 3 months, creating a genuine continuity risk. The long release history and recent releases partly compensate, but do not remove the concentration concern.

Security policycaution

No SECURITY.md or equivalent security policy was found, leaving vulnerability reporting and response expectations less transparent.

Token permissionscaution

Three workflows declare read-only permissions, while one workflow has top-level write permissions. The explicit permissions are generally controlled, but the write-capable workflow adds a small operational risk.