vildanbina/laravel-auto-translation

Maintainerscaution

One registry account has publish access. The linked repository is owned by the same individual, so the small maintainer base is a genuine continuity risk rather than being offset by organizational backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release and push were recent, the current pause lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. This is a modest transparency and maintenance gap, not a severe risk on its own.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. However, both of its two action references are unpinned, which weakens build reproducibility and supply-chain hygiene.