spatie/pest-plugin-snapshots

Repo bus factorcaution

All two recent commits came from one contributor, creating concentration risk. The organization-owned repository provides some handoff capacity, so this is a caution rather than a severe risk.

Repo commit activitycaution

The repository received two commits in the last three months, showing some recent maintenance, but activity is limited.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency gap.

Security policycaution

The repository has no security policy. This is a minor transparency gap for reporting vulnerabilities, not evidence that the package is unsafe.

Workflow auditcaution

All three workflows were analyzed without findings or untrusted execution paths, and none grants top-level write access. However, all eight action references are unpinned, weakening build reproducibility and supply-chain hygiene.