upmind/provision-provider-base

Dependency profilecaution

Eight runtime dependencies, including Laravel components and Guzzle, create a meaningful dependency surface for a framework library. The profile is not excessive, but it warrants normal compatibility monitoring.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This is concerning because it suggests current source activity has paused despite the recent release history.

Repo toolingcaution

Composer and Make are used for project tooling, but no security scanning tools were detected. The build setup is present, while repository security hygiene is limited.

Security policycaution

No security policy was found in the linked repository. This reduces transparency around vulnerability reporting, though it is not evidence that vulnerabilities exist.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injections, or high-severity findings. However, all 6 action references are unpinned, leaving workflow dependencies exposed to upstream changes.