roadrunner-php/laravel-bridge

Repo bus factorcaution

All recent commits came from one contributor, creating a narrow recent contributor base. The organization-owned repository provides some handoff capacity, so this is a caution rather than a severe risk.

Repo commit activitycaution

Only one commit was recorded in the past three months, with one active maintainer. Recent release activity is reassuring, but this thin activity lowers confidence in sustained maintenance capacity.

Security policycaution

The repository has no SECURITY.md or equivalent security policy. This is a transparency and response-process gap, though it is partly offset by the project's organization backing and other repository evidence.

Workflow auditcaution

The single workflow was fully analyzed with no injection, untrusted-checkout, or audit findings, and it scopes permissions at job level. Its one action reference is unpinned, a minor reproducibility and supply-chain hygiene gap.