sinemacula/laravel-log-database

Release historycaution

The package is young, with two releases over 86 days and a median interval of about 26 days; this shows recent activity but gives limited evidence of long-term maintenance.

Repo bus factorcaution

One contributor made all 10 recent commits, leaving a low individual bus factor; organization ownership provides some handoff capacity but no second active contributor is shown.

Repo commit activitycaution

Ten commits from one active maintainer in the last three months show ongoing work, but the activity is concentrated in a single person.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest supply-chain hygiene gap.

Workflow auditcaution

All three workflows were analyzed, but all 12 action references are unpinned, two workflows grant top-level write permissions, and a high-confidence medium-severity finding reports inherited secrets in the release workflow.