vandetho/symflow-laravel

Maintainerscaution

Registry publishing access is held by one maintainer, which is a modest continuity concern for a user-owned project, but the repository shows two active contributors and recent releases.

Project backingcaution

The registry namespace and repository are owned by the same individual account, so there is no organization-level maintenance backing; recent releases and two active contributors provide some compensation.

Repo commit activitycaution

Only two commits were recorded in the last three months, which is limited activity, but two active maintainers and a release published on the assessment date partly compensate for the small commit count.

Token permissionscaution

Two workflows request top-level write permissions and the CI workflow lacks top-level permissions, leaving room for tighter least-privilege configuration even though no dangerous workflow pattern was detected.