spatie/laravel-cookie-consent

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization ownership provides some capacity for maintenance handoff but does not remove the current concentration.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last 3 months, which is a real sign of thin recent maintenance even though releases continue.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is not evidence that the release is unsafe.

Workflow auditcaution

All seven analyzed action references are unpinned, including a high-confidence high-severity unpinned container image finding. The audit found no untrusted checkout or script-injection path, which limits the concern to workflow reproducibility and build hygiene.