umar-jimoh/laravel-secretsync

Maintainerscaution

Only one account has registry publish access. That is a thin publishing base and leaves less redundancy if the maintainer becomes unavailable.

Release historycaution

The package has six releases since May 2025, but only one release in the last 12 months, indicating a notably slower recent cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. For a package that synchronizes application secrets, this is a meaningful but not decisive hygiene gap.

Security policycaution

The repository has no security policy. That reduces transparency for reporting vulnerabilities in a package handling secret-manager integrations.