tomatophp/laravel-discord-error-tracker

Dangerous workflowscaution

One workflow uses pull_request_target, which warrants review because that trigger can run with elevated repository context, although no untrusted checkout or script injection was detected.

Release historycaution

The package has only two releases over about 20 months, with one release in the last 12 months; this indicates a small and infrequent release history despite the current release being recent.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Recent merged pull requests and the current release provide some counterevidence, but the absence of recent commit activity remains a maintenance concern.

Repo popularitycaution

The repository has only two stars and no forks, so there is little external adoption evidence; popularity is supporting evidence rather than a health verdict, and the documented project structure partly compensates.

Token permissionscaution

Two workflows grant top-level write permissions and one workflow lacks top-level permissions, leaving broader-than-necessary GitHub Actions access as a transparency and hardening concern.