sshkolyk/laravel-queue-kafka

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency operations, adding execution surface beyond ordinary package loading.

Repo bus factorcaution

All 11 recent commits came from one contributor, leaving maintenance capacity concentrated if that contributor becomes unavailable.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users have no documented security-reporting process.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions with no high-confidence findings, but all 4 action references are unpinned, weakening build reproducibility.