spits-online/laravel-openprovider

Release historycaution

The package is less than a day old, with six releases all published on the same day. This shows active initial publishing but provides almost no evidence of sustained maintenance.

Repo bus factorcaution

All recent commits come from one contributor. Organization backing reduces the risk of a single individual being indispensable, but no second active contributor is shown.

Repo commit activitycaution

The repository has only one commit in the last three months from one active maintainer. Recent activity is present, but the maintenance record is too thin to demonstrate continuity.

Workflow auditcaution

All nine analyzed action references are unpinned, which weakens build reproducibility and exposes workflows to moving dependencies. The pull_request_target workflow has no untrusted checkout or script-injection sink, and the audit found no high-confidence dangerous findings.