sagrmore/laravel-sql-window

Project backingcaution

The registry namespace and repository are owned by the same individual account. This provides ownership consistency, though not the additional continuity expected from organization backing.

Release historycaution

This is a 50-day-old package with only one release, so there is limited evidence of sustained release maintenance. Recent repository activity partly offsets the short history but does not establish long-term stability.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap rather than a severe dependency risk.

Workflow auditcaution

The single workflow was fully analyzed with no injection sinks or audit findings, but both of its action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.