solid3d/laravel-tus-s3

Release historycaution

The package is only 34 days old with seven releases, and the median release interval is about 14 hours. This shows active iteration but provides little long-term maintenance history.

Repo bus factorcaution

One contributor made all 11 commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving a meaningful concentration risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning reduces supply-chain transparency for a package handling uploads and storage.

Security policycaution

No SECURITY.md or equivalent security policy was found, so the project provides no clear documented channel or process for reporting vulnerabilities.

Token permissionscaution

Two workflows lack top-level token permissions, and the release workflow declares write access. This is not an observed exploit, but the workflow permission posture is less restrictive than ideal.