temperbit/larahog

Release historycaution

The package has four releases over about five months, including the latest release roughly one month ago, with a median interval of about two days. This shows active early development, though the project has limited operating history.

Repo bus factorcaution

All three recent commits came from one contributor. Organization backing provides some ability to hand off maintenance, but no second active contributor is shown, leaving a meaningful continuity risk.

Repo commit activitycaution

There were three commits in the last three months, so maintenance has not stopped, but the activity level is modest for a package with a short history.

Token permissionscaution

Two workflows lack top-level token permissions and one declares top-level write access. This is a workflow-hardening gap, although the separate dangerous-workflow checks found no unsafe execution patterns.