spatie/laravel-typescript-transformer

Repo bus factorcaution

All 4 recent commits came from one contributor, leaving maintenance dependent on a single active individual despite organization ownership.

Repo commit activitycaution

The repository recorded 4 commits in the last 3 months, so activity is present, though not especially broad or intense.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no documented security policy, so users lack a stated channel and process for reporting security issues.

Workflow auditcaution

All 10 analyzed action references are unpinned, and the audit found a high-confidence unpinned container image; this weakens build reproducibility, though no untrusted checkout or script injection was found.